Skip to content
fr Sign in
6.7 Medium

CVE-2022-2785 There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs…

Description

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c

Affected products and versions

Product Affected versions Fixed in
kernel 5.18 5.18 → latest No fix stated
kernel 5.14 5.14 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of kernel

The 13 CVEs of kernel →
CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability 6.6 Medium CVE-2020-14386 A flaw was found in the Linux kernel before 5.9-rc4 6.7 Medium CVE-2020-10781 A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the… 5.5 Medium CVE-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect… 5.5 Medium
Track this CVE