CVE-2022-48667

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb3: fix temporary data corruption in insert range

insert range doesn't discard the affected cached region so can risk temporarily corrupting file data.

Also includes some minor cleanup (avoiding rereading inode size repeatedly unnecessarily) to make it clearer.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected software

VendorProductVersions
LinuxLinux>= 7fe6fe95b936084dce6eedcc2cccadf96eafae73, < 0cdde8460c304283d4ebe3f767a70215d1ab9d4e; >= 7fe6fe95b936084dce6eedcc2cccadf96eafae73, < 9c8b7a293f50253e694f19161c045817a938e551
LinuxLinux5.13

References

Timeline

Published
Apr 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-486683.3In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range dCVE-2022-486695.5In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in papr_get_attr() `buf` is allCVE-2022-48674.3Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.CVE-2022-486707.8In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() When auxiliary_device_CVE-2022-486715.5In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzboCVE-2022-486727.8In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910CVE-2022-486735.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifCVE-2022-486747.8In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testiCVE-2022-486755.5In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead CVE-2022-48684.3Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.CVE-2022-486818.8Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions tCVE-2022-486826.0In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
CVE-2022-48667: Low severity, CVSS 3.3 | Vulnix