imPC@ndo IT

Tracker / CVE-2022-47942

CVE-2022-47942

High 8.8

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.

Affected products and versions

linux linux_kernel · 5.15 → 5.15.62
linux linux_kernel · 5.16 → 5.18.18
linux linux_kernel · 5.19 → 5.19.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References