VDB
GHSA-g2h7-7gvv-x89v
GHSA-g2h7-7gvv-x89v
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published December 23, 2022
An issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
- Dec 23, 2022 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-g2h7-7gvv-x89v
vulnetix vdb fixes GHSA-g2h7-7gvv-x89vOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-g2h7-7gvv-x89v/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.zerodayinitiative.com/advisories/ZDI-22-1688 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-47942 advisory
- https://github.com/torvalds/linux/commit/8f0541186e9ad1b62accc9519cc2b7a7240272a7 url
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 url
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f0541186e9ad1b62accc9519cc2b7a7240272a7 url
- http://www.openwall.com/lists/oss-security/2022/12/23/10 url