{"id":"CVE-2022-49766","title":"netlink: Bounds-check struct nlmsgerr creation","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: Bounds-check struct nlmsgerr creation\n\nIn preparation for FORTIFY_SOURCE doing bounds-check on memcpy(),\nswitch from __nlmsg_put to nlmsg_put(), and explain th…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < aff4eb16f589c3af322a2582044bca365381fcd6","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 710d21fdff9a98d621cd4e64167f3ef8af4e2fd1","Linux 2.6.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:46:59.810796Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:49:42.508Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49766","references":[{"url":"https://git.kernel.org/stable/c/aff4eb16f589c3af322a2582044bca365381fcd6"},{"url":"https://git.kernel.org/stable/c/710d21fdff9a98d621cd4e64167f3ef8af4e2fd1"}],"tags":["cve.org"],"epss":0.0017,"epssPercentile":0.06463,"ingestedAt":"2026-11-05T22:38:31.588Z","slug":"CVE-2022-49766","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: Bounds-check struct nlmsgerr creation\n\nIn preparation for FORTIFY_SOURCE doing bounds-check on memcpy(),\nswitch from __nlmsg_put to nlmsg_put(), and explain the bounds check\nfor dealing with the memcpy() across a composite flexible array struct.\nAvoids this future run-time warning:\n\n  memcpy: detected field-spanning write (size 32) of single field \"&errmsg->msg\" at net/netlink/af_netlink.c:2447 (size 16)\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < aff4eb16f589c3af322a2582044bca365381fcd6`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 710d21fdff9a98d621cd4e64167f3ef8af4e2fd1`\n- `Linux 2.6.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}