CVE-2022-49058
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
In the Linux kernel, a vulnerability in the cifs driver was fixed that could lead to a buffer overflow when handling symbolic links. The issue was due to a missing check that link_len does not exceed the size of the link_str buffer. A check was added.
Risk Assessment
Risk of buffer overflow, potentially leading to system crash or arbitrary code execution in kernel context.
Recommendation
Update the Linux kernel to a patched version and restrict access to CIFS shares.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max) It's caused because Smatch marks 'link_len' as untrusted since it comes from sscanf(). Add a check to ensure that 'link_len' is not larger than the size of the 'link_str' buffer.