CVE-2022-48668: smb3: fix temporary data corruption in collapse range
In the Linux kernel, the following vulnerability has been resolved:
smb3: fix temporary data corruption in collapse range
collapse range doesn't discard the affected cached region so can risk temporarily corrupting the file data. This fixes xfstest generic/031
I also decided to merge a minor cleanup to this into the same patch (avoiding rereading inode size repeatedly unnecessarily) to make it clearer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48668?
CVE-2022-48668 has a high severity rating due to its potential to cause data corruption in file operations.
How do I fix CVE-2022-48668?
To fix CVE-2022-48668, update your Linux Kernel to the latest stable version that includes the security patch.
What is the impact of CVE-2022-48668?
The impact of CVE-2022-48668 is temporary data corruption in files accessed through the smb3 protocol.
Which versions of the Linux Kernel are affected by CVE-2022-48668?
CVE-2022-48668 affects specific versions of the Linux Kernel prior to the implementation of the fix.
What should I do if I cannot update for CVE-2022-48668?
If you cannot update, mitigate the risk by limiting access to the affected file operations or applying temporary workarounds until a full update is possible.