Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0027 19.4 —
AFFECTED Product Versions Fixed Linux 8c242db9b8c01b252290e23827163787f07e01d1 – — Linux 4.12 – 4.19.247
TIMELINE Feb 26 Reserved by Linux Feb 26 Published (CNA: Linux) Aug 4 RESCORED — CVE-2022-49425 (Linux). CVSS 7.8 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a bogus pointer if no break was hit. Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined value making it unsafe to use that in the comparision to determine if the specific element was found. Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that by chance (or intention of an attacker) it matches the value of 'page' even though the correct element was not found. This is fixed by using a separate list iterator variable for the loop and only setting the original variable if a suitable element was found. Then determing if the element was found is simply checking if the variable is set.
| Date | Event | Detail |
|---|---|---|
| February 26, 2025 | Reserved | Reserved by Linux |
| February 26, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-49425 (Linux). CVSS 7.8 → 5.5 (NVD). |
Authoritative record: CVE-2022-49425 at cve.org
Vendors: linux
Weaknesses: CWE-476
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-49425 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.