CVE-2022-48619: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap.

Affected products

• Linux Linux Kernel: before 5.17.10 (fixed in 5.17.10)

Published 2024-01-12. Last modified 2026-06-17.