CVE-2022-49271

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the smb2 ioctl query info() function. When this function is called with certain parameters, such as smb query info::flags=PASSTHRU FSCTL and smb query info::output buffer length=0, it can return a null pointer, leading to a null pointer dereference later in the smb2 ioctl query ioctl() function. This issue can be triggered by passing an invalid smb query info::flags value. The vulnerability can cause a general protection fault and potentially allow for arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.