CVE-2022-47940: High severity Linux Linux kernel vulnerability
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.18.18
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47940?
CVE-2022-47940 has been categorized as high severity due to the lack of length validation in the smb2_write function.
How do I fix CVE-2022-47940?
To fix CVE-2022-47940, upgrade your Linux kernel to version 5.18.18 or later.
Which Linux kernel versions are affected by CVE-2022-47940?
CVE-2022-47940 affects Linux kernel versions from 5.15 through 5.18 before 5.18.18.
What are the potential impacts of CVE-2022-47940?
Exploitation of CVE-2022-47940 could lead to data corruption or denial of service conditions in the affected systems.
Is CVE-2022-47940 related to SMB protocol vulnerabilities?
Yes, CVE-2022-47940 relates specifically to vulnerabilities in the SMB2 protocol implementation within the ksmbd module.