| Vulnerability Status: Final | Source: Third Party / OSS | Initial Publication Date: 2022-12-23 | Last Updated: 2026-06-25 06:26:16 |
Summary:
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.
CVE#: CVE-2022-47939
Vulnerability score (v3): 9.8
Vector (v3): 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity (v3): 1 - Critical
Product(s): FlashArray, FlashBlade
Version First Fixed: Not affected
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-47939