CVE - CVE-2022-49058

CVE-ID
CVE-2022-49058	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max) It's caused because Smatch marks 'link_len' as untrusted since it comes from sscanf(). Add a check to ensure that 'link_len' is not larger than the size of the 'link_str' buffer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1316c28569a80ab3596eeab05bf5e01991e7e739 URL:https://git.kernel.org/stable/c/1316c28569a80ab3596eeab05bf5e01991e7e739 MISC:https://git.kernel.org/stable/c/22d658c6c5affed10c8907e67160cef0b6c92186 URL:https://git.kernel.org/stable/c/22d658c6c5affed10c8907e67160cef0b6c92186 MISC:https://git.kernel.org/stable/c/3e582749e742e662a8e9bb37cffac62dccaaa1e2 URL:https://git.kernel.org/stable/c/3e582749e742e662a8e9bb37cffac62dccaaa1e2 MISC:https://git.kernel.org/stable/c/4e166a41180be2f1e66bbb6d46448e80a9a5ec05 URL:https://git.kernel.org/stable/c/4e166a41180be2f1e66bbb6d46448e80a9a5ec05 MISC:https://git.kernel.org/stable/c/515e7ba11ef043d6febe69389949c8ef5f25e9d0 URL:https://git.kernel.org/stable/c/515e7ba11ef043d6febe69389949c8ef5f25e9d0 MISC:https://git.kernel.org/stable/c/64c4a37ac04eeb43c42d272f6e6c8c12bfcf4304 URL:https://git.kernel.org/stable/c/64c4a37ac04eeb43c42d272f6e6c8c12bfcf4304 MISC:https://git.kernel.org/stable/c/9901b07ba42b39266b34a888e48d7306fd707bee URL:https://git.kernel.org/stable/c/9901b07ba42b39266b34a888e48d7306fd707bee MISC:https://git.kernel.org/stable/c/eb5f51756944735ac70cd8bb38637cc202e29c91 URL:https://git.kernel.org/stable/c/eb5f51756944735ac70cd8bb38637cc202e29c91
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)