CVE-2022-49373

Medium

Advisory

Published 26 Feb 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 65; of 17,821 indexed, latest versions
Container images: 61; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 65 of 17,821 indexed charts deploy, on 61 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+38 more	5.4.0-126.142, 5.15.0-48.54	61

OSV records: UBUNTU-CVE-2022-49373

Charts affected

65 by stars

Chart

Latest

Affected images

Radar Score

smilencsa

1.1.0

2 of 23 See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	linux@4.15.0-210.221	no fix listed
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	linux@4.15.0-210.221	no fix listed

Open the chart page →

279,500

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	linux@4.15.0-74.84	no fix listed

Open the chart page →

95,465

omec-control-planeopencord

0.1.31

1 of 8 See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
omecproject/mme-exporter :paging-latest	bcc5f19fd676	linux@4.15.0-88.88	no fix listed

Open the chart page →

108,608

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	linux@4.15.0-126.129	no fix listed

Open the chart page →

81,519

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	linux@4.15.0-122.124	no fix listed

Open the chart page →

102,205

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	linux@5.4.0-125.141	5.4.0-126.142

Open the chart page →

92,624

podnat-state-storepodnat-controller

0.3.2

1 of 1 See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	linux@5.4.0-122.138	5.4.0-126.142

Open the chart page →

79,989

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	linux@5.4.0-117.132	5.4.0-126.142

Open the chart page →

101,953

spotinst-ocean-network-clientspot

1.0.0

1 of 1 See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	linux@4.15.0-191.202	no fix listed

Open the chart page →

66,245

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	linux@4.15.0-143.147	no fix listed

Open the chart page →

75,354

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	linux@4.15.0-143.147	no fix listed

Open the chart page →

75,300

tensor_apptensor-app

0.2.2

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	linux@5.15.0-25.25	5.15.0-48.54

Open the chart page →

109,733

tdarrvhdirk

5.0.5

1 of 2 See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	linux@5.4.0-110.124	5.4.0-126.142

Open the chart page →

159,251

emissary-ingresswener

8.12.2

1 of 2 See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	linux@4.15.0-112.113	no fix listed

Open the chart page →

77,304

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-49373.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	linux@4.15.0-112.113	no fix listed

Open the chart page →

77,304

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
statcan/ckan :2.9	3921305425b8	linux@5.4.0-74.83	5.4.0-126.142	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	linux@5.4.0-77.86	5.4.0-126.142	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	linux@4.15.0-204.215	no fix listed	1
xeladock/mysql_dns :latest	4baf531453f1	linux@5.15.0-25.25	5.15.0-48.54	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	linux@4.15.0-88.88	no fix listed	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	linux@5.4.0-110.124	5.4.0-126.142	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	linux@5.4.0-80.90	5.4.0-126.142	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	linux@5.4.0-80.90	5.4.0-126.142	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	linux@5.4.0-121.137	5.4.0-126.142	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	linux@4.15.0-191.202	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	linux@5.4.0-67.75	5.4.0-126.142	1