{"schema_version":"1.9.0","id":"CVE-2022-47940","published":"2022-12-23T00:00:00Z","modified":"2026-08-12T03:51:30.997489397Z","details":"An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git","events":[{"introduced":"8bb7eca972ad531c9b149c0a51ab43a417385813"},{"fixed":"4b0986a3613c92f4ec1bdc7f60ec66fea135991f"}],"database_specific":{"extracted_events":[{"introduced":"5.15"},{"fixed":"5.18"}],"source":"DESCRIPTION"}}],"versions":["v5.18-rc1","v5.18-rc7","v5.18-rc2","v5.18-rc5","v5.17","v5.18-rc4","v5.18-rc3","v5.18-rc6","v5.17-rc6","v5.17-rc4","v5.17-rc8","v5.17-rc7","v5.17-rc1","v5.17-rc3","v5.17-rc2","v5.17-rc5","v5.16","v5.16-rc1","v5.16-rc8","v5.16-rc5","v5.16-rc6","v5.16-rc7","v5.16-rc3","v5.16-rc2","v5.16-rc4","v5.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47940.json"}}],"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2022/12/23/10"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.18"},{"type":"WEB","url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=158a66b245739e15858de42c0ba60fcf3de9b8e6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47940.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47940"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6"}],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47940.json","unresolved_ranges":[{"extracted_events":[{"fixed":"5.18.18"}],"source":"DESCRIPTION"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}]}