01 Record

CVE-2022-49508

HID: elan: Fix potential double free in elan_input_configured

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

HID: elan: Fix potential double free in elan_input_configured

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.30% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 22.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-26 02:13Z1 YR AGO

Last updated

2026-05-11 19:01Z3 MO AGO

Reserved

2025-02-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-415Double FreeVariant

Data version

5.2

Document digest

00edc8e42586a9e7f466c7b7d85fe650eb85d7dfbd2c632c53fccc71b78b0563

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 to < c92ec22a991778a096342cf1a917ae36c5c86a90, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < f1d4f19a796551edc6679a681ea1756b8c578c08, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 6d0726725c7c560495f5ff364862a2cefea542e3, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 5291451851feeb66fd4bf0826710f482f3b1ab38, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 8bb1716507ebf12d50bbf181764481de3b6bc7fd, 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 1af20714fedad238362571620be0bd690ded05b6, 4.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c92ec22a991778a096342cf1a917ae36c5c86a90
git.kernel.orghttps://git.kernel.org/stable/c/f1d4f19a796551edc6679a681ea1756b8c578c08
git.kernel.orghttps://git.kernel.org/stable/c/6d0726725c7c560495f5ff364862a2cefea542e3
git.kernel.orghttps://git.kernel.org/stable/c/24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47
git.kernel.orghttps://git.kernel.org/stable/c/5291451851feeb66fd4bf0826710f482f3b1ab38
git.kernel.orghttps://git.kernel.org/stable/c/8bb1716507ebf12d50bbf181764481de3b6bc7fd
git.kernel.orghttps://git.kernel.org/stable/c/1af20714fedad238362571620be0bd690ded05b6

01 Record index

CVE-2022-49508

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-49508

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References