{"id":"CVE-2022-48667","state":"PUBLISHED","title":"smb3: fix temporary data corruption in insert range","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in insert range\n\ninsert range doesn't discard the affected cached region\nso can risk temporarily corrupting file data.\n\nAlso includes some minor cleanup (avoiding rereading\ninode size repeatedly unnecessarily) to make it clearer.","publishedAt":"2024-04-28T13:01:54.693Z","updatedAt":"2026-05-11T18:44:48.773Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7fe6fe95b936084dce6eedcc2cccadf96eafae73","status":"affected","lessThan":"0cdde8460c304283d4ebe3f767a70215d1ab9d4e","versionType":"git"},{"version":"7fe6fe95b936084dce6eedcc2cccadf96eafae73","status":"affected","lessThan":"9c8b7a293f50253e694f19161c045817a938e551","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/cifs/smb2ops.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.13","versionType":"semver"},{"version":"5.19.12","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/cifs/smb2ops.c"]}],"references":["https://git.kernel.org/stable/c/0cdde8460c304283d4ebe3f767a70215d1ab9d4e","https://git.kernel.org/stable/c/9c8b7a293f50253e694f19161c045817a938e551"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/48xxx/CVE-2022-48667.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-48667","state":"PUBLISHED","datePublished":"2024-04-28T13:01:54.693Z","dateUpdated":"2026-05-11T18:44:48.773Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-02-25T13:44:28.320Z"},"containers":{"cna":{"title":"smb3: fix temporary data corruption in insert range","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb3: fix temporary data corruption in insert range\n\ninsert range doesn't discard the affected cached region\nso can risk temporarily corrupting file data.\n\nAlso includes some minor cleanup (avoiding rereading\ninode size repeatedly unnecessarily) to make it clearer."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7fe6fe95b936084dce6eedcc2cccadf96eafae73","status":"affected","lessThan":"0cdde8460c304283d4ebe3f767a70215d1ab9d4e","versionType":"git"},{"version":"7fe6fe95b936084dce6eedcc2cccadf96eafae73","status":"affected","lessThan":"9c8b7a293f50253e694f19161c045817a938e551","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/cifs/smb2ops.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.13","versionType":"semver"},{"version":"5.19.12","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/cifs/smb2ops.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/0cdde8460c304283d4ebe3f767a70215d1ab9d4e"},{"url":"https://git.kernel.org/stable/c/9c8b7a293f50253e694f19161c045817a938e551"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T18:44:48.773Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"5.19.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.0"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-48667","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-09T18:39:55.074234Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:16:44.685Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/0cdde8460c304283d4ebe3f767a70215d1ab9d4e","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/9c8b7a293f50253e694f19161c045817a938e551","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T15:17:55.885Z"}}]}}}