PT-2024-11771 · Linux+2 · Linux Kernel+2

David Howells · Published 2022-08-23 · Updated 2026-05-26 · CVE-2022-48668

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to temporary data corruption in the collapse range of the smb3 module. The collapse range does not discard the affected cached region, which can risk temporarily corrupting file data. This issue is fixed by a patch that also includes a minor cleanup to avoid rereading inode size repeatedly unnecessarily.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-696

Related Identifiers

AZL-67475

BDU:2025-14245

CVE-2022-48668

OPENSUSE-SU-2024_1641-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

SUSE-SU-2024:1641-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1647-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:1870-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 821

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48668.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:1659-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1643-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-67475 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48668 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1663-1 · Vendor Advisory
• https://git.kernel.org/stable/c/49523a4732204bdacbf3941a016503ddb4ddb3b9 · Patch
• https://osv.dev/vulnerability/CVE-2022-48668 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48668 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14245 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1641-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1644-1 · Vendor Advisory
• https://git.kernel.org/stable/c/fa30a81f255a56cccd89552cd6ce7ea6e8d8acc4 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-48668 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48668 · Vendor Advisory