An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in setntacldacl, related to use of SMB2QUERYINFOHE after a malformed SMB2SETINFOHE command.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47942.json"
[
{
"id": "CVE-2022-47942-02051cf1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"133365505725286918244683182515073332576",
"318824120095389632058724805908919984299",
"156401990208421198299753810276992643051",
"22253437135512125409071000002511177132"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/vfs.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-09deb5ff",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154401148986863431991191680000012192457",
"1494872343718924166475917855531596059",
"272522428543456812819280932553470837073",
"40089124029522873800434413629851417028",
"245308659456260943433680314169465568229",
"135227452601120045615066552416191585004",
"81145484285972217178008364943506973230",
"337099949001879188795080403691567914494",
"327267644272421482475856995346135314013",
"128685886838272986120471359886107484937",
"242585214953249391097752937615299592633",
"232791069386713070453912399927465708556",
"98913264996524474465600923569861796114",
"334020966735553704582929968123949951237",
"18027074510243492261797477304391703860",
"213753860188004397176146321104907407074",
"225652504010510430016231518581637784563",
"256615538905790373528484071007256692069",
"81672647220521765377214609424188637712",
"151481088389706380705190165945233778383",
"301885750849260829242276682896333544141",
"36408602790870883779939143320188474132",
"255497201845266322853648920019480894652",
"9701461306713495283861484607382857179",
"273770473715929356996283829357964210446",
"165916504766431944921029720344047002796",
"22741265552532162083106676435295917588",
"60201710202995772506882354816457531718",
"6853745676289112952799608771639942396",
"326704068217035399986948572648074405171",
"211279739076960936745561864432487231268",
"195211711852930070698967300576698758635",
"182714236229697657957659559844552113930"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-0ad45415",
"signature_type": "Function",
"digest": {
"function_hash": "70201413698282266472244179898404571860",
"length": 3940.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb_inherit_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-2a891de1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"58265715236485181918584048030567796455",
"131430531472476157420313727398442021089",
"268331110760594369405739505496387473443",
"232341424039763065567916743357325284223"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smbacl.h"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-4b4f0c99",
"signature_type": "Function",
"digest": {
"function_hash": "111596637407676884870791194630131451563",
"length": 345.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_calc_max_out_buf_len",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-59b8dd61",
"signature_type": "Function",
"digest": {
"function_hash": "120564191151834659108054291911170598673",
"length": 786.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_allocate_rsp_buf",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-7b4af10c",
"signature_type": "Function",
"digest": {
"function_hash": "294996994912431651314857047173040747944",
"length": 752.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "set_ntacl_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-8a8989bd",
"signature_type": "Function",
"digest": {
"function_hash": "283193285913653843508571520032825999883",
"length": 18138.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_open",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-b26c161b",
"signature_type": "Function",
"digest": {
"function_hash": "27154515897956975092676647160167574586",
"length": 1543.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "ksmbd_vfs_get_sd_xattr",
"file": "fs/ksmbd/vfs.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-bafa9d81",
"signature_type": "Function",
"digest": {
"function_hash": "84388865702088129139108665969061996993",
"length": 3533.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb_check_perm_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-bc0ec719",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277383443754336536090588424823159974278",
"206864834238111897271387353422399542650",
"304618009481439615377063955227290801395",
"35793514148086391249168468039152001820",
"327467491712690873125855456887209702281",
"78120814932123694639936204735246252061",
"53704848267480528560579561895530964246",
"110963168836416272438241557445987914653",
"281768098937155790836412300275543016366",
"321242900796424091696849066230539201",
"32171481956292129274188433110854523760",
"215095871602075012087440012499957043241",
"30713656178546984781997933102100592305",
"187236371371421528200443961885284473508",
"134022317258625060904690643081090486643",
"231051941090246610701652510155817303087",
"10447575329812205703909346234474277258",
"269286588574924250174832898658999534534",
"333529652885985379574910104228581826588",
"224029550948426776618724367605726161969",
"271388500512234584161247704155692675166",
"292573878774873888176277882525104259849",
"67902826395035911138479239911417222309",
"47908854018290128472090619253585139865",
"326786609082609615913945004301985408427",
"37631015250356473482554484746615110291",
"221690441995002354789952156117580617787",
"243715427841402538843071770055004968472",
"91671686754867378257527476212853739822",
"140534643470241850446174206551065639385",
"239349298819212024141935762990411500612",
"235512886004540589826802343912458911100",
"175231104757052896480757524547521683443",
"184581322250075734308960133253353740469",
"182986656126241314442982877226791576205",
"2213137557574225626292094911053010292",
"49057720435746554092294844540719619181",
"207632719444525927521113305695976455601",
"260541160181814808022783690375608163481",
"296236426908720629740205813605910242833",
"335190226444124327014401382603419994228",
"74411232536462510882127871081951549",
"227496631296120895135892937723515594580",
"148014133120719035604429937647443722492",
"171158470564529893090291445587703226686",
"38718721601994618090416527611490922531",
"109308813647140901478926540097629858787",
"207533200881581369971960239182535888108",
"330614096899044957475864159751739978564",
"288426479666680844227422733499862935223",
"146294591501220157020730956702410887398",
"316779283138334859865633264677268887815",
"20807901739309861592734209202881021443",
"37794947746125809867129438360899815867",
"40529480579730911882654906998689146500",
"58315043823450316946554400122608945559",
"293884985270560207367745757692556631845",
"92242226923156490874659751416631631560",
"295042600454005692071112942335754980897",
"126685371346209251662358835856660784125",
"116554233920608167231741911632324928718",
"141157082730368675812636032228229762537",
"72175488951691629803453387723027473841",
"58851848433182361022518136261733979457",
"296356800346376224814843863056533891812",
"213716711463660871158419804360124382230",
"109706038556162377516676877715358323296",
"176812682246136414691762105260814544962",
"56033114411098059143351470144648577985",
"78250163179043673736736821526025914305",
"130483026250869031703893284475124600782",
"132979775136749521823821315731958500687",
"32997725359823080492355034911633913561",
"166237682708613935859958306800962701631",
"155343973886947427576808221688421604354",
"290768011966813952530848033605470711437",
"215129642192074205486046390366076616413",
"39191328184545216323274350990247706288",
"130701123034702208103992644297933969000",
"284066879665026458107470115265382068270",
"30722366679334427844517291091876342294",
"314100351747289046844536054542067313028",
"258129470020849039045010088878684115421",
"175616069227034722098076715623404218918",
"68260148325964960195744355635845707528",
"174220674382570192103140897383895009790",
"84927949742583686351036608931852979495",
"68924957697815029504455145648087291587",
"243073285152038218807040285128205006508",
"104330375423198599981475456098872941702",
"59776904521108906971389131793296856507",
"298517517999207722232165081929548444488",
"212234397798379376942897444175794085255",
"319732394212087337688487297197919880528",
"112023099566879259621133622907997703531",
"324422395305973736591891039347682963080",
"49778950382637633435617418815383705856",
"196891989813286713978215390987094420461",
"98849521027769256455908675175359476188",
"257273657568399393915389387756553967562",
"207789465851204022636765440205384337822",
"191963459206003736690368679522274114674",
"254696111369061744319082932940539428586",
"335991380611129666072343533670570001202",
"258102127473496107002209657015127343134",
"129096143661562880425860357132189359165",
"49778950382637633435617418815383705856",
"34893911210049457456424582124786927471",
"78029371467752252163440735041487751043"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-c5f982f0",
"signature_type": "Function",
"digest": {
"function_hash": "84757116557996073686661794783625466477",
"length": 1785.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_get_info_sec",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-e14c9034",
"signature_type": "Function",
"digest": {
"function_hash": "78679160102628319035113271855286600497",
"length": 1865.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "build_sec_desc",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47942.json"
[
{
"id": "CVE-2022-47942-0e052890",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"133365505725286918244683182515073332576",
"318824120095389632058724805908919984299",
"156401990208421198299753810276992643051",
"22253437135512125409071000002511177132"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/vfs.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-22f45206",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154401148986863431991191680000012192457",
"1494872343718924166475917855531596059",
"272522428543456812819280932553470837073",
"40089124029522873800434413629851417028",
"245308659456260943433680314169465568229",
"135227452601120045615066552416191585004",
"81145484285972217178008364943506973230",
"337099949001879188795080403691567914494",
"327267644272421482475856995346135314013",
"128685886838272986120471359886107484937",
"242585214953249391097752937615299592633",
"232791069386713070453912399927465708556",
"98913264996524474465600923569861796114",
"334020966735553704582929968123949951237",
"18027074510243492261797477304391703860",
"213753860188004397176146321104907407074",
"225652504010510430016231518581637784563",
"256615538905790373528484071007256692069",
"81672647220521765377214609424188637712",
"151481088389706380705190165945233778383",
"301885750849260829242276682896333544141",
"36408602790870883779939143320188474132",
"255497201845266322853648920019480894652",
"9701461306713495283861484607382857179",
"273770473715929356996283829357964210446",
"165916504766431944921029720344047002796",
"22741265552532162083106676435295917588",
"60201710202995772506882354816457531718",
"6853745676289112952799608771639942396",
"326704068217035399986948572648074405171",
"211279739076960936745561864432487231268",
"195211711852930070698967300576698758635",
"182714236229697657957659559844552113930"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-6b025498",
"signature_type": "Function",
"digest": {
"function_hash": "84388865702088129139108665969061996993",
"length": 3533.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb_check_perm_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-74d5ccb3",
"signature_type": "Function",
"digest": {
"function_hash": "120564191151834659108054291911170598673",
"length": 786.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_allocate_rsp_buf",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-9d867967",
"signature_type": "Function",
"digest": {
"function_hash": "70201413698282266472244179898404571860",
"length": 3940.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb_inherit_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-a7ae3cd7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"58265715236485181918584048030567796455",
"131430531472476157420313727398442021089",
"268331110760594369405739505496387473443",
"232341424039763065567916743357325284223"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smbacl.h"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-b59b8168",
"signature_type": "Function",
"digest": {
"function_hash": "294996994912431651314857047173040747944",
"length": 752.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "set_ntacl_dacl",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-b80cdb86",
"signature_type": "Function",
"digest": {
"function_hash": "78679160102628319035113271855286600497",
"length": 1865.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "build_sec_desc",
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-c4580a49",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277383443754336536090588424823159974278",
"206864834238111897271387353422399542650",
"304618009481439615377063955227290801395",
"35793514148086391249168468039152001820",
"327467491712690873125855456887209702281",
"78120814932123694639936204735246252061",
"53704848267480528560579561895530964246",
"110963168836416272438241557445987914653",
"281768098937155790836412300275543016366",
"321242900796424091696849066230539201",
"32171481956292129274188433110854523760",
"215095871602075012087440012499957043241",
"30713656178546984781997933102100592305",
"187236371371421528200443961885284473508",
"134022317258625060904690643081090486643",
"231051941090246610701652510155817303087",
"10447575329812205703909346234474277258",
"269286588574924250174832898658999534534",
"333529652885985379574910104228581826588",
"224029550948426776618724367605726161969",
"271388500512234584161247704155692675166",
"292573878774873888176277882525104259849",
"67902826395035911138479239911417222309",
"47908854018290128472090619253585139865",
"326786609082609615913945004301985408427",
"37631015250356473482554484746615110291",
"221690441995002354789952156117580617787",
"243715427841402538843071770055004968472",
"91671686754867378257527476212853739822",
"140534643470241850446174206551065639385",
"239349298819212024141935762990411500612",
"235512886004540589826802343912458911100",
"175231104757052896480757524547521683443",
"184581322250075734308960133253353740469",
"182986656126241314442982877226791576205",
"2213137557574225626292094911053010292",
"49057720435746554092294844540719619181",
"207632719444525927521113305695976455601",
"260541160181814808022783690375608163481",
"296236426908720629740205813605910242833",
"335190226444124327014401382603419994228",
"74411232536462510882127871081951549",
"227496631296120895135892937723515594580",
"148014133120719035604429937647443722492",
"171158470564529893090291445587703226686",
"38718721601994618090416527611490922531",
"109308813647140901478926540097629858787",
"207533200881581369971960239182535888108",
"330614096899044957475864159751739978564",
"288426479666680844227422733499862935223",
"146294591501220157020730956702410887398",
"316779283138334859865633264677268887815",
"20807901739309861592734209202881021443",
"37794947746125809867129438360899815867",
"40529480579730911882654906998689146500",
"58315043823450316946554400122608945559",
"293884985270560207367745757692556631845",
"92242226923156490874659751416631631560",
"295042600454005692071112942335754980897",
"126685371346209251662358835856660784125",
"116554233920608167231741911632324928718",
"141157082730368675812636032228229762537",
"72175488951691629803453387723027473841",
"58851848433182361022518136261733979457",
"296356800346376224814843863056533891812",
"213716711463660871158419804360124382230",
"109706038556162377516676877715358323296",
"176812682246136414691762105260814544962",
"56033114411098059143351470144648577985",
"78250163179043673736736821526025914305",
"130483026250869031703893284475124600782",
"132979775136749521823821315731958500687",
"32997725359823080492355034911633913561",
"166237682708613935859958306800962701631",
"155343973886947427576808221688421604354",
"290768011966813952530848033605470711437",
"215129642192074205486046390366076616413",
"39191328184545216323274350990247706288",
"130701123034702208103992644297933969000",
"284066879665026458107470115265382068270",
"30722366679334427844517291091876342294",
"314100351747289046844536054542067313028",
"258129470020849039045010088878684115421",
"175616069227034722098076715623404218918",
"68260148325964960195744355635845707528",
"174220674382570192103140897383895009790",
"84927949742583686351036608931852979495",
"68924957697815029504455145648087291587",
"243073285152038218807040285128205006508",
"104330375423198599981475456098872941702",
"59776904521108906971389131793296856507",
"298517517999207722232165081929548444488",
"212234397798379376942897444175794085255",
"319732394212087337688487297197919880528",
"112023099566879259621133622907997703531",
"324422395305973736591891039347682963080",
"49778950382637633435617418815383705856",
"196891989813286713978215390987094420461",
"98849521027769256455908675175359476188",
"257273657568399393915389387756553967562",
"207789465851204022636765440205384337822",
"191963459206003736690368679522274114674",
"254696111369061744319082932940539428586",
"335991380611129666072343533670570001202",
"258102127473496107002209657015127343134",
"129096143661562880425860357132189359165",
"49778950382637633435617418815383705856",
"34893911210049457456424582124786927471",
"78029371467752252163440735041487751043"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"file": "fs/ksmbd/smbacl.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-c66cc157",
"signature_type": "Function",
"digest": {
"function_hash": "84757116557996073686661794783625466477",
"length": 1785.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_get_info_sec",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-e4084918",
"signature_type": "Function",
"digest": {
"function_hash": "27154515897956975092676647160167574586",
"length": 1543.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "ksmbd_vfs_get_sd_xattr",
"file": "fs/ksmbd/vfs.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-e875fb7a",
"signature_type": "Function",
"digest": {
"function_hash": "111596637407676884870791194630131451563",
"length": 345.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_calc_max_out_buf_len",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
},
{
"id": "CVE-2022-47942-ea311686",
"signature_type": "Function",
"digest": {
"function_hash": "283193285913653843508571520032825999883",
"length": 18138.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7",
"target": {
"function": "smb2_open",
"file": "fs/ksmbd/smb2pdu.c"
},
"deprecated": false
}
]