CVE-2022-47938mediumCWE-125

CVE-2022-47938

Published · Updated

Follow this CVE+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 60%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product (28 components)
Red Hat Enterprise Linux 7
workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Not affected
3 products (170 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 6
In short

A flaw in the Linux kernel's ksmbd file server allows an attacker to crash the system by sending a specially crafted file sharing request, potentially causing downtime and denial of service.

Technical detail

An out-of-bounds read vulnerability in fs/ksmbd/smb2misc.c during SMB2_TREE_CONNECT processing allows unauthenticated or local attackers to trigger a kernel panic (OOPS) by providing malformed SMB protocol packets; affects kernel versions 5.15 through 5.19 before 5.19.2.

Summary generated and translated by AI from the official description.
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · n/a