[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-49390":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":74,"related":75,"reserved_at":9,"published_at":79,"modified_at":80,"state":81,"summary":82,"references_raw":91,"kevs":106,"epss":107,"epss_history":110,"metrics":380,"affected":388},"CVE-2022-49390","In the Linux kernel, the following vulnerability has been resolved:\n\nmacsec: fix UAF bug for real_dev\n\nCreate a new macsec device but not get reference to real_dev. That can\nnot ensure that real_dev is freed after macsec. That will trigger the\nUAF bug for real_dev as following:\n\n==================================================================\nBUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662\nCall Trace:\n ...\n macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662\n dev_get_iflink+0x73/0xe0 net/core/dev.c:637\n default_operstate net/core/link_watch.c:42 [inline]\n rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54\n linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161\n\nAllocated by task 22209:\n ...\n alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549\n rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235\n veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748\n\nFreed by task 8:\n ...\n kfree+0xd6/0x4d0 mm/slub.c:4552\n kvfree+0x42/0x50 mm/util.c:615\n device_release+0x9f/0x240 drivers/base/core.c:2229\n kobject_cleanup lib/kobject.c:673 [inline]\n kobject_release lib/kobject.c:704 [inline]\n kref_put include/linux/kref.h:65 [inline]\n kobject_put+0x1c8/0x540 lib/kobject.c:721\n netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327\n\nAfter commit faab39f63c1f (\"net: allow out-of-order netdev unregistration\")\nand commit e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"), we\ncan add dev_hold_track() in macsec_dev_init() and dev_put_track() in\nmacsec_free_netdev() to fix the problem.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72],{"_key":25},"SUSE-SU-2025:01600-1",{"_key":27},"SUSE-SU-2025:1176-1",{"_key":29},"SUSE-SU-2025:1241-1",{"_key":31},"USN-7907-5",{"_key":33},"USN-7922-1",{"_key":35},"USN-7922-2",{"_key":37},"USN-7922-3",{"_key":39},"USN-7922-4",{"_key":41},"USN-7922-5",{"_key":43},"USN-7928-1",{"_key":45},"USN-7928-2",{"_key":47},"USN-7928-3",{"_key":49},"USN-7928-4",{"_key":51},"USN-7928-5",{"_key":53},"USN-7937-1",{"_key":55},"USN-7939-1",{"_key":57},"USN-7939-2",{"_key":59},"DEBIAN-CVE-2022-49390",{"_key":61},"USN-7938-1",{"_key":63},"UBUNTU-CVE-2022-49390",{"_key":65},"USN-7907-1",{"_key":67},"USN-7907-2",{"_key":69},"USN-7907-3",{"_key":71},"USN-7907-4",{"_key":73},"LSN-0117-1",[],[76,77,78],{"_key":25},{"_key":27},{"_key":29},"2025-02-26T02:11:23.327Z","2026-05-23T15:22:03.515Z","Analyzed",{"cisa_kev":83,"cisa_ransomware":83,"cisa_vendor":9,"epss_severity":84,"epss_score":85,"severity":86,"severity_score":87,"severity_version":88,"severity_source":89,"severity_vector":90,"severity_status":81},false,"low",0.00013,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[92,98,102],{"url":93,"sources":94,"tags":96},"https://git.kernel.org/stable/c/78933cbc143b82d02330e00900d2fd08f2682f4e",[89,95],"nvd",[97],"Patch",{"url":99,"sources":100,"tags":101},"https://git.kernel.org/stable/c/d130282179aa6051449ac8f8df1115769998a665",[89,95],[97],{"url":103,"sources":104,"tags":105},"https://git.kernel.org/stable/c/196a888ca6571deb344468e1d7138e3273206335",[89,95],[97],[],{"date":108,"score":85,"percentile":109},"2026-06-03",0.02187,[111,115,118,121,124,127,130,133,136,140,143,146,149,152,155,159,162,165,168,172,175,178,181,184,187,189,192,195,198,201,204,207,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,315,318,321,324,327,330,332,335,338,341,343,346,349,352,355,358,360,363,366,369,372,375,378],{"date":112,"score":113,"percentile":114},"2025-11-04",0.00029,0.07008,{"date":116,"score":113,"percentile":117},"2025-11-05",0.07029,{"date":119,"score":113,"percentile":120},"2025-11-06",0.07147,{"date":122,"score":113,"percentile":123},"2025-11-07",0.07172,{"date":125,"score":113,"percentile":126},"2025-11-08",0.07166,{"date":128,"score":113,"percentile":129},"2025-11-09",0.07137,{"date":131,"score":113,"percentile":132},"2025-11-10",0.07102,{"date":134,"score":113,"percentile":135},"2025-11-11",0.0713,{"date":137,"score":138,"percentile":139},"2025-11-12",0.00031,0.07859,{"date":141,"score":138,"percentile":142},"2025-11-13",0.07896,{"date":144,"score":138,"percentile":145},"2025-11-14",0.07961,{"date":147,"score":138,"percentile":148},"2025-11-15",0.07998,{"date":150,"score":138,"percentile":151},"2025-11-16",0.08012,{"date":153,"score":138,"percentile":154},"2025-11-17",0.08005,{"date":156,"score":157,"percentile":158},"2025-11-18",0.00058,0.13571,{"date":160,"score":157,"percentile":161},"2025-11-19",0.13589,{"date":163,"score":157,"percentile":164},"2025-11-20",0.13602,{"date":166,"score":138,"percentile":167},"2025-11-21",0.08149,{"date":169,"score":170,"percentile":171},"2025-11-22",0.00034,0.09352,{"date":173,"score":170,"percentile":174},"2025-11-23",0.09325,{"date":176,"score":170,"percentile":177},"2025-11-24",0.09307,{"date":179,"score":170,"percentile":180},"2025-11-25",0.09295,{"date":182,"score":170,"percentile":183},"2025-11-26",0.09302,{"date":185,"score":170,"percentile":186},"2025-11-27",0.09313,{"date":188,"score":170,"percentile":180},"2025-11-28",{"date":190,"score":170,"percentile":191},"2025-11-29",0.09323,{"date":193,"score":170,"percentile":194},"2025-11-30",0.09331,{"date":196,"score":170,"percentile":197},"2025-12-01",0.09377,{"date":199,"score":170,"percentile":200},"2025-12-02",0.09389,{"date":202,"score":170,"percentile":203},"2025-12-03",0.09413,{"date":205,"score":170,"percentile":206},"2025-12-04",0.09408,{"date":208,"score":209,"percentile":210},"2025-12-05",0.00036,0.10084,{"date":212,"score":209,"percentile":213},"2025-12-06",0.10099,{"date":215,"score":209,"percentile":216},"2025-12-07",0.10101,{"date":218,"score":170,"percentile":219},"2025-12-08",0.0949,{"date":221,"score":170,"percentile":222},"2025-12-09",0.09547,{"date":224,"score":170,"percentile":225},"2025-12-10",0.09629,{"date":227,"score":170,"percentile":228},"2025-12-11",0.09664,{"date":230,"score":170,"percentile":231},"2025-12-12",0.09686,{"date":233,"score":170,"percentile":234},"2025-12-13",0.09726,{"date":236,"score":170,"percentile":237},"2025-12-14",0.09717,{"date":239,"score":170,"percentile":240},"2025-12-15",0.09646,{"date":242,"score":170,"percentile":243},"2025-12-16",0.09633,{"date":245,"score":170,"percentile":246},"2025-12-17",0.09715,{"date":248,"score":209,"percentile":249},"2025-12-18",0.10327,{"date":251,"score":209,"percentile":252},"2025-12-19",0.10343,{"date":254,"score":209,"percentile":255},"2025-12-20",0.10336,{"date":257,"score":170,"percentile":258},"2025-12-21",0.09769,{"date":260,"score":170,"percentile":261},"2025-12-22",0.09742,{"date":263,"score":209,"percentile":264},"2025-12-23",0.10392,{"date":266,"score":209,"percentile":267},"2025-12-24",0.10397,{"date":269,"score":209,"percentile":270},"2025-12-25",0.1048,{"date":272,"score":209,"percentile":273},"2025-12-26",0.10474,{"date":275,"score":209,"percentile":276},"2025-12-27",0.10471,{"date":278,"score":209,"percentile":279},"2025-12-28",0.10479,{"date":281,"score":209,"percentile":282},"2025-12-29",0.10439,{"date":284,"score":209,"percentile":285},"2025-12-30",0.10419,{"date":287,"score":209,"percentile":288},"2025-12-31",0.10468,{"date":290,"score":209,"percentile":291},"2026-01-01",0.1051,{"date":293,"score":209,"percentile":294},"2026-01-02",0.10508,{"date":296,"score":209,"percentile":297},"2026-01-03",0.10483,{"date":299,"score":209,"percentile":300},"2026-01-04",0.10411,{"date":302,"score":209,"percentile":303},"2026-01-05",0.10372,{"date":305,"score":209,"percentile":306},"2026-01-06",0.10366,{"date":308,"score":209,"percentile":309},"2026-01-07",0.10396,{"date":311,"score":209,"percentile":312},"2026-01-08",0.10447,{"date":314,"score":209,"percentile":279},"2026-01-09",{"date":316,"score":209,"percentile":317},"2026-01-10",0.10495,{"date":319,"score":209,"percentile":320},"2026-01-11",0.10476,{"date":322,"score":209,"percentile":323},"2026-01-12",0.10452,{"date":325,"score":209,"percentile":326},"2026-01-13",0.10415,{"date":328,"score":209,"percentile":329},"2026-01-14",0.10467,{"date":331,"score":209,"percentile":270},"2026-01-15",{"date":333,"score":209,"percentile":334},"2026-01-16",0.10514,{"date":336,"score":209,"percentile":337},"2026-01-17",0.10529,{"date":339,"score":209,"percentile":340},"2026-01-18",0.10491,{"date":342,"score":209,"percentile":282},"2026-01-19",{"date":344,"score":209,"percentile":345},"2026-01-20",0.10414,{"date":347,"score":209,"percentile":348},"2026-01-21",0.10381,{"date":350,"score":209,"percentile":351},"2026-01-22",0.10374,{"date":353,"score":209,"percentile":354},"2026-01-23",0.10466,{"date":356,"score":209,"percentile":357},"2026-01-24",0.1052,{"date":359,"score":209,"percentile":320},"2026-01-25",{"date":361,"score":209,"percentile":362},"2026-01-26",0.10433,{"date":364,"score":209,"percentile":365},"2026-01-27",0.10418,{"date":367,"score":209,"percentile":368},"2026-01-28",0.10394,{"date":370,"score":209,"percentile":371},"2026-01-29",0.10377,{"date":373,"score":209,"percentile":374},"2026-01-30",0.10393,{"date":376,"score":209,"percentile":377},"2026-01-31",0.1041,{"date":379,"score":209,"percentile":365},"2026-02-01",[381,386],{"source":89,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":382,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":383,"vectorString":90,"impactScore":384,"exploitabilityScore":385},"HIGH",9.8,4.6,{"source":95,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":387,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":383,"vectorString":90,"impactScore":384,"exploitabilityScore":385},[389,426],{"ecosystem":9,"name":390,"vendor":391,"product":391,"cpe_part":392,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":393},"Linux","linux","a",[394,401,404,407,409,411,413,417,421,425],{"version":395,"is_range":396,"range_type":89,"version_start":397,"version_start_type":398,"version_end":399,"version_end_type":400,"fixed_in":9},">= 2bce1ebed17da54c65042ec2b962e3234bad5b47, \u003C 78933cbc143b82d02330e00900d2fd08f2682f4e",true,"2bce1ebed17da54c65042ec2b962e3234bad5b47","including","78933cbc143b82d02330e00900d2fd08f2682f4e","excluding",{"version":402,"is_range":396,"range_type":89,"version_start":397,"version_start_type":398,"version_end":403,"version_end_type":400,"fixed_in":9},">= 2bce1ebed17da54c65042ec2b962e3234bad5b47, \u003C d130282179aa6051449ac8f8df1115769998a665","d130282179aa6051449ac8f8df1115769998a665",{"version":405,"is_range":396,"range_type":89,"version_start":397,"version_start_type":398,"version_end":406,"version_end_type":400,"fixed_in":9},">= 2bce1ebed17da54c65042ec2b962e3234bad5b47, \u003C 196a888ca6571deb344468e1d7138e3273206335","196a888ca6571deb344468e1d7138e3273206335",{"version":408,"is_range":83,"range_type":89,"version_start":408,"version_start_type":398,"version_end":408,"version_end_type":398,"fixed_in":9},"1861904a6092ed411203c6a02c75bfc45b27cc3c",{"version":410,"is_range":83,"range_type":89,"version_start":410,"version_start_type":398,"version_end":410,"version_end_type":398,"fixed_in":9},"3a2675a2d97a68332fa5c33043038bfeb31455a8",{"version":412,"is_range":83,"range_type":89,"version_start":412,"version_start_type":398,"version_end":412,"version_end_type":398,"fixed_in":9},"b0add6db3d5ec4561cab257358871a9d3df7f0a3",{"version":414,"is_range":396,"range_type":89,"version_start":415,"version_start_type":398,"version_end":416,"version_end_type":400,"fixed_in":9},">= 4.14.154, \u003C 4.15","4.14.154","4.15",{"version":418,"is_range":396,"range_type":89,"version_start":419,"version_start_type":398,"version_end":420,"version_end_type":400,"fixed_in":9},">= 4.19.84, \u003C 4.20","4.19.84","4.20",{"version":422,"is_range":396,"range_type":89,"version_start":423,"version_start_type":398,"version_end":424,"version_end_type":400,"fixed_in":9},">= 5.3.11, \u003C 5.4","5.3.11","5.4",{"version":424,"is_range":83,"range_type":89,"version_start":424,"version_start_type":398,"version_end":424,"version_end_type":398,"fixed_in":9},{"ecosystem":9,"name":427,"vendor":391,"product":428,"cpe_part":429,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":430},"linux kernel","linux_kernel","o",[431,434,436,439],{"version":432,"is_range":396,"range_type":433,"version_start":415,"version_start_type":398,"version_end":416,"version_end_type":400,"fixed_in":9},"gte4.14.154_lt4.15","cpe",{"version":435,"is_range":396,"range_type":433,"version_start":419,"version_start_type":398,"version_end":420,"version_end_type":400,"fixed_in":9},"gte4.19.84_lt4.20",{"version":437,"is_range":396,"range_type":433,"version_start":423,"version_start_type":398,"version_end":438,"version_end_type":400,"fixed_in":9},"gte5.3.11_lt5.17.15","5.17.15",{"version":440,"is_range":396,"range_type":433,"version_start":441,"version_start_type":398,"version_end":442,"version_end_type":400,"fixed_in":9},"gte5.18_lt5.18.3","5.18","5.18.3"]