CVE-2022-43945: linux linux_kernel Incorrect Calculation of Buffer Size
Vulnerability summary
CVE-2022-43945 is a high (CVSS 7.5) Incorrect Calculation of Buffer Size vulnerability in linux linux_kernel. EPSS estimates a 5.41% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities.
Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 5% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 95 · Related 82Timeline
- 04-11-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
5.41%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
Decrease -16.88 pp
From 22.29% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer.
- CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu92 products
- linuxAll versions (No fix recorded) | < 4.4.0-236.270 | < 4.15.0-202.213 | < 5.4.0-137.154 | < 5.15.0-56.62
- linux-aws< 4.4.0-1115.121 | < 4.4.0-1153.168 | < 4.15.0-1148.160 | < 5.4.0-1094.102 | < 5.15.0-1026.30
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Netapp6 products
Debian1 product
- linux< 6.0.3-1
Linux1 product
- linux_kernel< 6.0.2 | < 5.19.17 | ≥ 6.0, < 6.0.2
4 vendors · 100 products
References
28 links- security.netapp.com/advisory/ntap-20221215-0006/Third Party Advisory
