{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2022-50859",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-50859",
    "idYear": 2022,
    "status": "PUBLISHED",
    "publishedAt": "2025-12-30T12:15:33.198Z",
    "updatedAt": "2026-05-11T19:26:30.131Z",
    "importedAt": "2026-10-24T01:56:49.724Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message\n\nCommit d5c7076b772a (\"smb3: add smb3.1.1 to default dialect list\")\nextend the dialects from 3 to 4, but forget to decrease the extended\nlength when specific the dialect, then the message length is larger\nthan expected.\n\nThis maybe leak some info through network because not initialize the\nmessage body.\n\nAfter apply this patch, the VALIDATE_NEGOTIATE_INFO message length is\nreduced from 28 bytes to 26 bytes.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "d0050ec3ebbcb3451df9a65b8460be9b9e02e80c"
            },
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9312e04b6c6bc46354ecd0cc82052a2b3df0b529"
            },
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "60480291c1fcafad8425d93f771b5bcc2bd398b4"
            },
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "943eb0ede74ecd609fdfd3f0b83e0d237613e526"
            },
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "fada9b8c95c77bb46b89e18117405bc90fce9f74"
            },
            {
              "version": "d5c7076b772ad7dcdb92303397b36aee8fa0d25d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e98ecc6e94f4e6d21c06660b0f336df02836694f"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.0",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.0"
            },
            {
              "version": "5.4.220",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.150",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.75",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "5.19.17",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.19.*"
            },
            {
              "version": "6.0.3",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.*"
            },
            {
              "version": "6.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}