Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L H L N U N N H 4.7 .0014 3.8 —
AFFECTED Product Versions Fixed Linux 6001a930ce0378b62210d4f83583fc88a903d89d – — Linux 5.12 – 5.15.78
TIMELINE May 1 Reserved by Linux May 1 Published (CNA: Linux) Aug 4 RESCORED — CVE-2022-49920 (Linux). CVSS 7.8 → 4.7 (NVD).
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: netlink notifier might race to release objects commit release path is invoked via call_rcu and it runs lockless to release the objects after rcu grace period. The netlink notifier handler might win race to remove objects that the transaction context is still referencing from the commit release path. Call rcu_barrier() to ensure pending rcu callbacks run to completion if the list of transactions to be destroyed is not empty.
| Date | Event | Detail |
|---|---|---|
| May 1, 2025 | Reserved | Reserved by Linux |
| May 1, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-49920 (Linux). CVSS 7.8 → 4.7 (NVD). |
Authoritative record: CVE-2022-49920 at cve.org
Vendors: linux
Weaknesses: CWE-362
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-49920 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.