PT-2021-6034 · Linux+9 · Linux Kernel+9

Tr3E · Published 2021-12-18 · Updated 2025-09-29 · CVE-2022-23222

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.15.14

Description The issue is related to errors in pointer dereferencing in the eBPF subsystem of the Linux kernel, allowing local users to gain privileges due to the availability of pointer arithmetic via certain * OR NULL pointer types.

Recommendations For Linux kernel versions 5.8 through 5.15.14, update to version 5.10.92, 5.15.15, or 5.16.1 to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-763

CWE-476

Related Identifiers

ALSA-2024:2950

ALSA-2024:3138

ALSA-2024_10939

ALSA-2024_2394

ALSA-2024_2950

ALSA-2024_3138

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2022-1387

ALT-PU-2022-1456

ALT-PU-2022-1647

ALT-PU-2022-1810

ALT-PU-2022-1853

ALT-PU-2022-2136

ALT-PU-2022-2137

ALT-PU-2022-2155

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-7534

BDU:2022-00622

CESA-2024_2950

CESA-2024_3138

CVE-2022-23222

DSA-5050-1

ELSA-2024-3138

INFSA-2024_2950

INFSA-2024_3138

MGASA-2022-0021

MGASA-2022-0022

MGASA-2022-0194

MGASA-2022-0195

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2024_3483-1

RHSA-2024:0724

RHSA-2024:10262

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

RLSA-2024_2950

RLSA-2024_3138

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2024:3483-1

SUSE-SU-2024_3483-1

USN-5278-1

USN-5337-1

USN-5362-1

USN-5368-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1217

• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/PenteraIO/CVE-2022-23222-POC · Exploit
• 🔥 http://openwall.com/lists/oss-security/2022/01/18/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-23222 · Security Note
• https://ubuntu.com/security/CVE-2021-4090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44733 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5337-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3138 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0195.html · Security Note
• https://osv.dev/vulnerability/USN-5362-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:2950 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28715 · Vendor Advisory