PT-2021-7030 · Linux+1 · Linux Kernel+1

Alex · Published 2021-12-29 · Updated 2023-08-14 · CVE-2022-0433

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc1

Description The issue is related to a NULL pointer dereference flaw in the Linux kernel's BPF subsystem, specifically in the way a user triggers the map get next key function of the BPF bloom filter. This flaw allows a local user to crash the system.

Recommendations For Linux kernel versions prior to 5.17-rc1, update to version 5.17-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the BPF subsystem to minimize the risk of exploitation.

Fix

NULL Pointer Dereference

Use of Uninitialized Resource

Weakness Enumeration

CWE-476

CWE-908

Related Identifiers

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-8996

BDU:2022-02999

CVE-2022-0433

Affected Products

Alt Linux

Linux Kernel

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2022-0433 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0433 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=3ccdcee28415c4226de05438b4d89eb5514edf73 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2048259 · Patch
• https://bdu.fstec.ru/vul/2022-02999 · Security Note
• https://osv.dev/vulnerability/AZL-8996 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0433 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0433 · Security Note
• https://ubuntu.com/security/CVE-2022-0433 · Vendor Advisory
• https://lore.kernel.org/bpf/[e-mail]/T · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 · Note
• https://lore.kernel.org/bpf/[e-mail]/t · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0433 · Note
• https://lore.kernel.org/bpf/[e-mail] · Note