{"id":"CVE-2022-49743","title":"In the Linux kernel, the following vulnerability has been resolved:\n\novl: Use \"buf\" flexible array for memcpy() destination\n\nThe \"buf\" flexible array needs to be the memcpy() destination to avoid\nfalse positive run-time warning from the …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\novl: Use \"buf\" flexible array for memcpy() destination\n\nThe \"buf\" flexible array needs to be the memcpy() destination to avoid\nfalse positive run-time warning from the …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 5.15.93","linux_kernel >= 5.16, < 6.1.11"],"patched":["linux_kernel 6.1.11"],"published":"2025-03-27","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:24.880","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-49743","references":[{"url":"https://git.kernel.org/stable/c/012cdef22000f3104e4fa8224ad29fde509b8caf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/07a96977b2f462337a9121302de64277b8747ab1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a77141a06367825d639ac51b04703d551163e36c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cf8aa9bf97cadf85745506c6a3e244b22c268d63","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00452,"epssPercentile":0.39082,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-15T21:18:12.828083Z"},"ingestedAt":"2026-10-15T21:45:11.287Z","slug":"CVE-2022-49743","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\novl: Use \"buf\" flexible array for memcpy() destination\n\nThe \"buf\" flexible array needs to be the memcpy() destination to avoid\nfalse positive run-time warning from the recent FORTIFY_SOURCE\nhardening:\n\n  memcpy: detected field-spanning write (size 93) of single field \"&fh->fb\"\n  at fs/overlayfs/export.c:799 (size 21)\n\n## Affected\n\n- `linux_kernel < 5.15.93`\n- `linux_kernel >= 5.16, < 6.1.11`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.1.11`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}