CVE-2022-49611None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.
Linux >= b9cdaaf0a3becc52e8b4662fef28c452c4f009b4 < 3d323b99ff5c8c57005184056d65f6af5b0479d8Linux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < f744b88dfc201bf8092833ec70b23c720188b527Linux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 17a9fc4a7b91f8599223631bb6ae6416bc0de1c0Linux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 4d7f72b6e1bc630bec7e4cd51814bc2b092bf153Linux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 8d5cff499a6d740c91ff37963907e0e983c37f0fLinux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 8c38306e2e9257af4af2819aa287a4711ff36329Linux >= 117cc7a908c83697b0b737d15ae1eb5943afe35b < 9756bba28470722dacb79ffce554336dd1f6a6cdLinux 68d1f7a3f1a35639a563bbad768d5df885b4ff05Linux 20e080e2752d108388d386ecc0b33d7797dfb18fLinux eebc3f8adee0a6f43a4789ef0bf5c5b35de8cfe4Linux c1ddd99a029636e234a800f28790a60d6ac0318fLinux >= 4.14.14 < 4.14.297Linux >= 3.2.101 < 3.3Linux >= 3.16.56 < 3.17Linux >= 4.4.113 < 4.5Linux >= 4.9.77 < 4.10Linux 4.15Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses