CVE-2022-47938
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2
Medium · published December 23, 2022
Patch now
High probability of exploitation
CVSS calls it medium at 6.5. It sits in the 99.1th percentile for exploit probability.
What it is
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.60016 · 99.1th percentile
- Published
- 2022-12-23T00:00Z
EPSS history
Timeline