CVE-2022-49743: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy() destination The "buf" flexible array needs to be the memcpy() destination to avoid false positive run-time warning from the recent FORTIFY_SOURCE hardening: memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21)

Affected products

• Linux Linux Kernel: before 5.15.93 (fixed in 5.15.93); from 5.16, before 6.1.11 (fixed in 6.1.11)

Published 2025-03-27. Last modified 2026-08-04.