An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.
[
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"function_hash": "7912307056908127525079901163187365020",
"length": 1481.0
},
"target": {
"file": "fs/ksmbd/smb2pdu.c",
"function": "smb2_write_pipe"
},
"id": "CVE-2022-47940-8fb66698",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"93943881530226306472950183536748848180",
"321433153399333494930538653410561483146",
"64293138331647803293181562454767028442",
"181673965960130958074220893626428639758",
"221433397255809693504677260461548189718",
"276057147658037937711900591131205615230",
"48975877642210027933427336573234396114",
"3980272772043614659399382622357822545",
"125061859617821204085298181641906961205",
"284645633346606220809863948462369641287",
"87398475669339058776504579869334569296",
"336056564089258493030679038054851576560",
"227675685551237542933185298556386656065",
"312471975081464707887381227687732179944",
"297076756463300415281271487043991435704",
"306359206612396687302542891018801801115",
"191657918249543968319942609537401201440",
"274860248526756357870403122941814898944",
"121722472483686680630285523109954520731",
"197201737859227593922616432344398456839",
"329731640572164824636435318353561474737",
"181673965960130958074220893626428639758",
"221433397255809693504677260461548189718",
"276057147658037937711900591131205615230",
"48975877642210027933427336573234396114",
"3980272772043614659399382622357822545",
"125061859617821204085298181641906961205",
"284645633346606220809863948462369641287",
"87398475669339058776504579869334569296",
"336056564089258493030679038054851576560",
"227675685551237542933185298556386656065",
"312471975081464707887381227687732179944",
"297076756463300415281271487043991435704",
"46049467653675928312311131982714682976",
"218717257472799163085467403806988783027",
"164838205754536284556410761009561321992"
]
},
"target": {
"file": "fs/ksmbd/smb2pdu.c"
},
"id": "CVE-2022-47940-b2e95294",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"function_hash": "24252254713883808227268925774727320660",
"length": 3506.0
},
"target": {
"file": "fs/ksmbd/smb2pdu.c",
"function": "smb2_write"
},
"id": "CVE-2022-47940-dd02f39d",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-47940.json"
[
{
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"function_hash": "24252254713883808227268925774727320660",
"length": 3506.0
},
"target": {
"file": "fs/ksmbd/smb2pdu.c",
"function": "smb2_write"
},
"id": "CVE-2022-47940-116e1720",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"function_hash": "7912307056908127525079901163187365020",
"length": 1481.0
},
"target": {
"file": "fs/ksmbd/smb2pdu.c",
"function": "smb2_write_pipe"
},
"id": "CVE-2022-47940-a078aa07",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"93943881530226306472950183536748848180",
"321433153399333494930538653410561483146",
"64293138331647803293181562454767028442",
"181673965960130958074220893626428639758",
"221433397255809693504677260461548189718",
"276057147658037937711900591131205615230",
"48975877642210027933427336573234396114",
"3980272772043614659399382622357822545",
"125061859617821204085298181641906961205",
"284645633346606220809863948462369641287",
"87398475669339058776504579869334569296",
"336056564089258493030679038054851576560",
"227675685551237542933185298556386656065",
"312471975081464707887381227687732179944",
"297076756463300415281271487043991435704",
"306359206612396687302542891018801801115",
"191657918249543968319942609537401201440",
"274860248526756357870403122941814898944",
"121722472483686680630285523109954520731",
"197201737859227593922616432344398456839",
"329731640572164824636435318353561474737",
"181673965960130958074220893626428639758",
"221433397255809693504677260461548189718",
"276057147658037937711900591131205615230",
"48975877642210027933427336573234396114",
"3980272772043614659399382622357822545",
"125061859617821204085298181641906961205",
"284645633346606220809863948462369641287",
"87398475669339058776504579869334569296",
"336056564089258493030679038054851576560",
"227675685551237542933185298556386656065",
"312471975081464707887381227687732179944",
"297076756463300415281271487043991435704",
"46049467653675928312311131982714682976",
"218717257472799163085467403806988783027",
"164838205754536284556410761009561321992"
]
},
"target": {
"file": "fs/ksmbd/smb2pdu.c"
},
"id": "CVE-2022-47940-b89cd1bf",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-47940.json"