High severity7.5NVD Advisory· Published Mar 27, 2025· Updated Aug 4, 2026

CVE-2022-49743

Description

In the Linux kernel, the following vulnerability has been resolved:

ovl: Use "buf" flexible array for memcpy() destination

The "buf" flexible array needs to be the memcpy() destination to avoid false positive run-time warning from the recent FORTIFY_SOURCE hardening:

memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21)

LLM-synthesized narrative grounded in this CVE's description and references.

Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <5.15.93
- (no CPE)
- (no CPE)range: 5.5
osv-coords
pkg:linux/kernel
Range: >= 5.5.0, < 5.10.248

No linked articles in our index yet.