CVE-2022-49058: cifs: potential buffer overflow in handling symlinks

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel2.6.37 and later · before 4.9.311
• linux linux kernel4.10 and later · before 4.14.276
• linux linux kernel4.15 and later · before 4.19.239
• linux linux kernel4.20 and later · before 5.4.190
• linux linux kernel5.5 and later · before 5.10.112
• linux linux kernel5.11 and later · before 5.15.35
• linux linux kernel5.16 and later · before 5.17.4
• linux linux kernel5.18

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 2.6.37affected
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 3e582749e742e662a8e9bb37cffac62dccaaa1e2affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 1316c28569a80ab3596eeab05bf5e01991e7e739affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before eb5f51756944735ac70cd8bb38637cc202e29c91affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 22d658c6c5affed10c8907e67160cef0b6c92186affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 4e166a41180be2f1e66bbb6d46448e80a9a5ec05affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 9901b07ba42b39266b34a888e48d7306fd707beeaffected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 515e7ba11ef043d6febe69389949c8ef5f25e9d0affected · git
  • c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131 and later · before 64c4a37ac04eeb43c42d272f6e6c8c12bfcf4304affected · git
  • before 2.6.37not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2022-49055Feb 26, 2025 · drm/amdkfd: Check for potential null return of kmalloc_array()
  22Monitor
• ← EarlierCVE-2022-49057Feb 26, 2025 · block: null_blk: end timed out poll request
  22Monitor
• Later →CVE-2022-49059Feb 26, 2025 · nfc: nci: add flush_workqueue to prevent uaf
  31Monitor

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.