{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"aff4eb16f589c3af322a2582044bca365381fcd6","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"710d21fdff9a98d621cd4e64167f3ef8af4e2fd1","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49766","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: Bounds-check struct nlmsgerr creation\n\nIn preparation for FORTIFY_SOURCE doing bounds-check on memcpy(),\nswitch from __nlmsg_put to nlmsg_put(), and explain the bounds check\nfor dealing with the memcpy() across a composite flexible array struct.\nAvoids this future run-time warning:\n\n  memcpy: detected field-spanning write (size 32) of single field \"&errmsg->msg\" at net/netlink/af_netlink.c:2447 (size 16)","epss":{"date":"2026-11-05","percentile":0.06471,"score":0.0017},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908182508,"publishedAt":1746108545569,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/aff4eb16f589c3af322a2582044bca365381fcd6"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/710d21fdff9a98d621cd4e64167f3ef8af4e2fd1"}],"remediation":[],"revision":"3b99f340870bf4bdeb417e4fc4d07bb42497866f48b73ed85b6d800fe0b7b77d","sources":[{"modifiedAt":1793908182508,"name":"CNA: Linux","retrievedAt":1793909394354,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49766"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909407117,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49766"}],"ssvc":{"assessedAt":1793908019810,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"netlink: Bounds-check struct nlmsgerr creation","updatedAt":1793909407117}