CVE-2022-49766
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
02/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netlink: Bounds-check struct nlmsgerr creation<br />
<br />
In preparation for FORTIFY_SOURCE doing bounds-check on memcpy(),<br />
switch from __nlmsg_put to nlmsg_put(), and explain the bounds check<br />
for dealing with the memcpy() across a composite flexible array struct.<br />
Avoids this future run-time warning:<br />
<br />
memcpy: detected field-spanning write (size 32) of single field "&errmsg->msg" at net/netlink/af_netlink.c:2447 (size 16)