CVE-2022-49743

CVE-2022-49743 affects the Linux kernel's overlay filesystem (ovl). The fix changes memcpy destination to use the root_buf/“buf” flexible array to avoid Fortify_SOURCE warnings. Root cause: copying into a flexible array that wasn’t the memcpy destination previously triggered a false positive warn...