[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-49014":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":72,"related":73,"reserved_at":9,"published_at":95,"modified_at":96,"state":97,"summary":98,"references_raw":107,"kevs":134,"epss":135,"epss_history":138,"metrics":395,"affected":401},"CVE-2022-49014","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: Fix use-after-free in tun_detach()\n\nsyzbot reported use-after-free in tun_detach() [1].  This causes call\ntrace like below:\n\n==================================================================\nBUG: KASAN: use-after-free in notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75\nRead of size 8 at addr ffff88807324e2a8 by task syz-executor.0/3673\n\nCPU: 0 PID: 3673 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00044-gcc675d22e422 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nCall Trace:\n \u003CTASK>\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:284 [inline]\n print_report+0x15e/0x461 mm/kasan/report.c:395\n kasan_report+0xbf/0x1f0 mm/kasan/report.c:495\n notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75\n call_netdevice_notifiers_info+0x86/0x130 net/core/dev.c:1942\n call_netdevice_notifiers_extack net/core/dev.c:1983 [inline]\n call_netdevice_notifiers net/core/dev.c:1997 [inline]\n netdev_wait_allrefs_any net/core/dev.c:10237 [inline]\n netdev_run_todo+0xbc6/0x1100 net/core/dev.c:10351\n tun_detach drivers/net/tun.c:704 [inline]\n tun_chr_close+0xe4/0x190 drivers/net/tun.c:3467\n __fput+0x27c/0xa90 fs/file_table.c:320\n task_work_run+0x16f/0x270 kernel/task_work.c:179\n exit_task_work include/linux/task_work.h:38 [inline]\n do_exit+0xb3d/0x2a30 kernel/exit.c:820\n do_group_exit+0xd4/0x2a0 kernel/exit.c:950\n get_signal+0x21b1/0x2440 kernel/signal.c:2858\n arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869\n exit_to_user_mode_loop kernel/entry/common.c:168 [inline]\n exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203\n __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]\n syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296\n do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe cause of the issue is that sock_put() from __tun_detach() drops\nlast reference count for struct net, and then notifier_call_chain()\nfrom netdev_state_change() accesses that struct net.\n\nThis patch fixes the issue by calling sock_put() from tun_detach()\nafter all necessary accesses for the struct net has done.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70],{"_key":25},"SUSE-SU-2025:1278-1",{"_key":27},"SUSE-SU-2024:4081-1",{"_key":29},"SUSE-SU-2024:4082-1",{"_key":31},"SUSE-SU-2024:4100-1",{"_key":33},"SUSE-SU-2024:4103-1",{"_key":35},"SUSE-SU-2024:4131-1",{"_key":37},"SUSE-SU-2024:4140-1",{"_key":39},"SUSE-SU-2024:4364-1",{"_key":41},"SUSE-SU-2025:0034-1",{"_key":43},"SUSE-SU-2025:1213-1",{"_key":45},"SUSE-SU-2025:1225-1",{"_key":47},"SUSE-SU-2025:1231-1",{"_key":49},"SUSE-SU-2025:1236-1",{"_key":51},"SUSE-SU-2025:1248-1",{"_key":53},"SUSE-SU-2025:1254-1",{"_key":55},"SUSE-SU-2025:1259-1",{"_key":57},"SUSE-SU-2025:1260-1",{"_key":59},"SUSE-SU-2025:1262-1",{"_key":61},"SUSE-SU-2025:4123-1",{"_key":63},"SUSE-SU-2024:3983-1",{"_key":65},"SUSE-SU-2024:3985-1",{"_key":67},"DEBIAN-CVE-2022-49014",{"_key":69},"RHSA-2025:6966",{"_key":71},"UBUNTU-CVE-2022-49014",[],[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},"2024-10-21T20:06:24.020Z","2026-05-11T18:51:32.417Z","Analyzed",{"cisa_kev":99,"cisa_ransomware":99,"cisa_vendor":9,"epss_severity":100,"epss_score":101,"severity":102,"severity_score":103,"severity_version":104,"severity_source":105,"severity_vector":106,"severity_status":97},false,"low",0.00013,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[108,114,118,122,126,130],{"url":109,"sources":110,"tags":112},"https://git.kernel.org/stable/c/1f23f1890d91812c35d32eab1b49621b6d32dc7b",[111,105],"cve.org",[113],"Patch",{"url":115,"sources":116,"tags":117},"https://git.kernel.org/stable/c/16c244bc65d1175775325ec0489a5a5c830e02c7",[111,105],[113],{"url":119,"sources":120,"tags":121},"https://git.kernel.org/stable/c/5f442e1d403e0496bacb74a58e2be7f500695e6f",[111,105],[113],{"url":123,"sources":124,"tags":125},"https://git.kernel.org/stable/c/04b995e963229501401810dab89dc73e7f12d054",[111,105],[113],{"url":127,"sources":128,"tags":129},"https://git.kernel.org/stable/c/4cde8da2d814a3b7b176db81922d4ddaad7c0f0e",[111,105],[113],{"url":131,"sources":132,"tags":133},"https://git.kernel.org/stable/c/5daadc86f27ea4d691e2131c04310d0418c6cd12",[111,105],[113],[],{"date":136,"score":101,"percentile":137},"2026-06-03",0.02228,[139,143,146,149,152,155,158,161,164,167,169,172,175,178,181,185,188,191,194,197,200,203,206,209,212,215,219,222,225,228,231,233,236,240,243,246,249,252,255,258,261,264,267,270,272,275,278,281,284,287,290,292,295,297,300,302,305,307,309,312,314,317,320,322,324,326,329,332,335,338,341,343,346,349,352,355,358,361,363,365,367,370,373,376,379,382,384,387,389,392],{"date":140,"score":141,"percentile":142},"2025-11-04",0.00083,0.25068,{"date":144,"score":141,"percentile":145},"2025-11-05",0.25052,{"date":147,"score":141,"percentile":148},"2025-11-06",0.25058,{"date":150,"score":141,"percentile":151},"2025-11-07",0.25059,{"date":153,"score":141,"percentile":154},"2025-11-08",0.2506,{"date":156,"score":141,"percentile":157},"2025-11-09",0.25022,{"date":159,"score":141,"percentile":160},"2025-11-10",0.24986,{"date":162,"score":141,"percentile":163},"2025-11-11",0.24988,{"date":165,"score":141,"percentile":166},"2025-11-12",0.25014,{"date":168,"score":141,"percentile":166},"2025-11-13",{"date":170,"score":141,"percentile":171},"2025-11-14",0.25007,{"date":173,"score":141,"percentile":174},"2025-11-15",0.24994,{"date":176,"score":141,"percentile":177},"2025-11-16",0.24946,{"date":179,"score":141,"percentile":180},"2025-11-17",0.24903,{"date":182,"score":183,"percentile":184},"2025-11-18",0.00068,0.16866,{"date":186,"score":141,"percentile":187},"2025-11-19",0.20454,{"date":189,"score":141,"percentile":190},"2025-11-20",0.20426,{"date":192,"score":141,"percentile":193},"2025-11-21",0.24827,{"date":195,"score":141,"percentile":196},"2025-11-22",0.24822,{"date":198,"score":141,"percentile":199},"2025-11-23",0.2477,{"date":201,"score":141,"percentile":202},"2025-11-24",0.24741,{"date":204,"score":141,"percentile":205},"2025-11-25",0.24728,{"date":207,"score":141,"percentile":208},"2025-11-26",0.24717,{"date":210,"score":141,"percentile":211},"2025-11-27",0.24715,{"date":213,"score":141,"percentile":214},"2025-11-28",0.24689,{"date":216,"score":217,"percentile":218},"2025-11-29",0.00012,0.01271,{"date":220,"score":217,"percentile":221},"2025-11-30",0.01281,{"date":223,"score":217,"percentile":224},"2025-12-01",0.01308,{"date":226,"score":217,"percentile":227},"2025-12-02",0.01303,{"date":229,"score":217,"percentile":230},"2025-12-03",0.01307,{"date":232,"score":217,"percentile":221},"2025-12-04",{"date":234,"score":217,"percentile":235},"2025-12-05",0.01297,{"date":237,"score":238,"percentile":239},"2025-12-06",0.00014,0.01934,{"date":241,"score":101,"percentile":242},"2025-12-07",0.01692,{"date":244,"score":101,"percentile":245},"2025-12-08",0.01694,{"date":247,"score":101,"percentile":248},"2025-12-09",0.01711,{"date":250,"score":101,"percentile":251},"2025-12-10",0.016,{"date":253,"score":101,"percentile":254},"2025-12-11",0.01596,{"date":256,"score":101,"percentile":257},"2025-12-12",0.01603,{"date":259,"score":101,"percentile":260},"2025-12-13",0.01586,{"date":262,"score":101,"percentile":263},"2025-12-14",0.01581,{"date":265,"score":101,"percentile":266},"2025-12-15",0.01576,{"date":268,"score":101,"percentile":269},"2025-12-16",0.01585,{"date":271,"score":101,"percentile":254},"2025-12-17",{"date":273,"score":101,"percentile":274},"2025-12-18",0.01587,{"date":276,"score":101,"percentile":277},"2025-12-19",0.01592,{"date":279,"score":101,"percentile":280},"2025-12-20",0.01593,{"date":282,"score":101,"percentile":283},"2025-12-21",0.01601,{"date":285,"score":101,"percentile":286},"2025-12-22",0.01604,{"date":288,"score":101,"percentile":289},"2025-12-23",0.01602,{"date":291,"score":101,"percentile":286},"2025-12-24",{"date":293,"score":101,"percentile":294},"2025-12-25",0.0161,{"date":296,"score":101,"percentile":294},"2025-12-26",{"date":298,"score":101,"percentile":299},"2025-12-27",0.01597,{"date":301,"score":101,"percentile":289},"2025-12-28",{"date":303,"score":101,"percentile":304},"2025-12-29",0.01595,{"date":306,"score":101,"percentile":274},"2025-12-30",{"date":308,"score":101,"percentile":260},"2025-12-31",{"date":310,"score":101,"percentile":311},"2026-01-01",0.01605,{"date":313,"score":101,"percentile":311},"2026-01-02",{"date":315,"score":101,"percentile":316},"2026-01-03",0.01608,{"date":318,"score":101,"percentile":319},"2026-01-04",0.01579,{"date":321,"score":101,"percentile":269},"2026-01-05",{"date":323,"score":101,"percentile":263},"2026-01-06",{"date":325,"score":101,"percentile":280},"2026-01-07",{"date":327,"score":101,"percentile":328},"2026-01-08",0.01606,{"date":330,"score":101,"percentile":331},"2026-01-09",0.0162,{"date":333,"score":101,"percentile":334},"2026-01-10",0.01634,{"date":336,"score":101,"percentile":337},"2026-01-11",0.01629,{"date":339,"score":101,"percentile":340},"2026-01-12",0.01611,{"date":342,"score":101,"percentile":328},"2026-01-13",{"date":344,"score":101,"percentile":345},"2026-01-14",0.01614,{"date":347,"score":101,"percentile":348},"2026-01-15",0.01623,{"date":350,"score":101,"percentile":351},"2026-01-16",0.01637,{"date":353,"score":101,"percentile":354},"2026-01-17",0.0164,{"date":356,"score":101,"percentile":357},"2026-01-18",0.0165,{"date":359,"score":101,"percentile":360},"2026-01-19",0.01638,{"date":362,"score":101,"percentile":331},"2026-01-20",{"date":364,"score":101,"percentile":294},"2026-01-21",{"date":366,"score":101,"percentile":316},"2026-01-22",{"date":368,"score":101,"percentile":369},"2026-01-23",0.01621,{"date":371,"score":101,"percentile":372},"2026-01-24",0.01627,{"date":374,"score":101,"percentile":375},"2026-01-25",0.01628,{"date":377,"score":101,"percentile":378},"2026-01-26",0.01624,{"date":380,"score":101,"percentile":381},"2026-01-27",0.01615,{"date":383,"score":101,"percentile":340},"2026-01-28",{"date":385,"score":101,"percentile":386},"2026-01-29",0.01625,{"date":388,"score":101,"percentile":337},"2026-01-30",{"date":390,"score":101,"percentile":391},"2026-01-31",0.01648,{"date":393,"score":101,"percentile":394},"2026-02-01",0.01676,[396],{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":397,"cvss_v4_0":9},{"baseScore":103,"baseSeverity":398,"vectorString":106,"impactScore":399,"exploitabilityScore":400},"HIGH",9.8,4.6,[402,431],{"ecosystem":9,"name":403,"vendor":404,"product":404,"cpe_part":405,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":406},"Linux","linux","a",[407,414,417,420,423,426,429],{"version":408,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":412,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 1f23f1890d91812c35d32eab1b49621b6d32dc7b",true,"83c1f36f9880814b24cdf6c2f91f66f61db65326","including","1f23f1890d91812c35d32eab1b49621b6d32dc7b","excluding",{"version":415,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":416,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 16c244bc65d1175775325ec0489a5a5c830e02c7","16c244bc65d1175775325ec0489a5a5c830e02c7",{"version":418,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":419,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 5f442e1d403e0496bacb74a58e2be7f500695e6f","5f442e1d403e0496bacb74a58e2be7f500695e6f",{"version":421,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":422,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 04b995e963229501401810dab89dc73e7f12d054","04b995e963229501401810dab89dc73e7f12d054",{"version":424,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":425,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 4cde8da2d814a3b7b176db81922d4ddaad7c0f0e","4cde8da2d814a3b7b176db81922d4ddaad7c0f0e",{"version":427,"is_range":409,"range_type":111,"version_start":410,"version_start_type":411,"version_end":428,"version_end_type":413,"fixed_in":9},">= 83c1f36f9880814b24cdf6c2f91f66f61db65326, \u003C 5daadc86f27ea4d691e2131c04310d0418c6cd12","5daadc86f27ea4d691e2131c04310d0418c6cd12",{"version":430,"is_range":99,"range_type":111,"version_start":430,"version_start_type":411,"version_end":430,"version_end_type":411,"fixed_in":9},"4.17",{"ecosystem":9,"name":432,"vendor":404,"product":433,"cpe_part":434,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":435},"linux kernel","linux_kernel","o",[436,440,444,448,452,456,458,460,462,464,466,468],{"version":437,"is_range":409,"range_type":438,"version_start":430,"version_start_type":411,"version_end":439,"version_end_type":413,"fixed_in":9},"gte4.17_lt4.19.268","cpe","4.19.268",{"version":441,"is_range":409,"range_type":438,"version_start":442,"version_start_type":411,"version_end":443,"version_end_type":413,"fixed_in":9},"gte4.20_lt5.4.226","4.20","5.4.226",{"version":445,"is_range":409,"range_type":438,"version_start":446,"version_start_type":411,"version_end":447,"version_end_type":413,"fixed_in":9},"gte5.5_lt5.10.158","5.5","5.10.158",{"version":449,"is_range":409,"range_type":438,"version_start":450,"version_start_type":411,"version_end":451,"version_end_type":413,"fixed_in":9},"gte5.11_lt5.15.82","5.11","5.15.82",{"version":453,"is_range":409,"range_type":438,"version_start":454,"version_start_type":411,"version_end":455,"version_end_type":413,"fixed_in":9},"gte5.16_lt6.0.12","5.16","6.0.12",{"version":457,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc1",{"version":459,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc2",{"version":461,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc3",{"version":463,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc4",{"version":465,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc5",{"version":467,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc6",{"version":469,"is_range":99,"range_type":438,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.1:rc7"]