Vulnpedia
← All CVEs

CVE-2022-49058

CRITICAL 9.1 ALL-YEARS

Published 2025-02-26 · Last modified 2026-08-05 · Linux · NVD: Modified

In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max) It's caused because Smatch marks 'link_len' as untrusted since it comes from sscanf(). Add a check to ensure that 'link_len' is not larger than the size of the 'link_str' buffer.

ELEVATED IMPACT

Severe if exploited (CVSS 9.1), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

0.9%chance of exploitation in 30 days · 59th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

9.1CVSS 3.1 · CRITICAL · CNA

  • ConfidentialityHigh
  • IntegrityNone
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Linux

Products Linux Linux Kernel

Weakness (CWE)

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References and research data (JSON)

Vendor product assessments

Showing 32 of 948 vendor product statements; 916 omitted. Read the full vendor advisory.

  • bpftool-debuginfo-0:5.14.0-70.141.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debuginfo-common-x86_64-0:5.14.0-284.11.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debuginfo-common-ppc64le-0:4.18.0-553.62.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debug-core-0:4.18.0-305.165.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-abi-stablelists-0:4.18.0-372.153.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=noarch

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • python3-perf-debuginfo-0:4.18.0-372.153.1.el8_6.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debug-0:4.18.0-477.104.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-tools-libs-0:5.14.0-70.141.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debuginfo-common-s390x-0:5.14.0-284.11.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debuginfo-0:5.14.0-284.11.1.el9_2.s390x as a component of Red Hat Enterprise Linux CRB (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-modules-extra-0:5.14.0-70.141.1.rt21.213.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-doc as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-doc

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • python-perf as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/python-perf

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debug-devel as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-devel

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-trace as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-trace

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-tools-libs-devel

    • no fix planned: Out of support scope
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-debug as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug

    • none available: Affected
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules-core

    • none available: Affected
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-modules as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules

    • none available: Affected
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt.src as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt?arch=src

    • none available: Affected
    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-64k-debug-modules-core as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-debug-modules-core

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-devel as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-devel

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-64k as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-64k

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-64k-modules as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-64k-modules

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-modules

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-tools as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-tools

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-zfcpdump-modules

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00
  • rv as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/rv

    Red Hat · CVE-2022-49058 · Updated 2026-08-04T19:44:51+00:00

Known Affected Software Configurations

VendorProductVersion range
LinuxLinux Kernel≥ 2.6.37 and < 4.9.311
LinuxLinux Kernel≥ 4.10 and < 4.14.276
LinuxLinux Kernel≥ 4.15 and < 4.19.239
LinuxLinux Kernel≥ 4.20 and < 5.4.190
LinuxLinux Kernel≥ 5.5 and < 5.10.112
LinuxLinux Kernel≥ 5.11 and < 5.15.35
LinuxLinux Kernel≥ 5.16 and < 5.17.4
LinuxLinux Kernel5.18
LinuxLinux Kernel5.18

All CVSS metrics

  • CRITICAL 9.1 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
  • HIGH 7.8 v3.1 · ADP Primary
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CRITICAL 9.1 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
  • HIGH 7.8 v3.1 · NVD Primary
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS