PT-2021-7276 · Linux+4 · Linux Kernel+4

Guilherme De Almeida Suckevicz · Published 2021-12-14 · Updated 2023-08-14 · CVE-2022-0264

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v5.16-rc6

Description A flaw in the Linux kernel's eBPF verifier allows internal memory locations to be returned to userspace when handling internal data structures. This can be exploited by a local attacker with permissions to insert eBPF code into the kernel, potentially leaking internal kernel memory details and defeating some kernel exploit mitigations.

Recommendations For Linux kernel versions prior to v5.16-rc6, update to version v5.16-rc6 or later to resolve the issue. As a temporary workaround, consider restricting the insertion of eBPF code to the kernel to minimize the risk of exploitation.

Fix

Information Disclosure

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-200

CWE-755

Related Identifiers

ALT-PU-2022-1175

ALT-PU-2022-1307

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-8497

BDU:2022-05010

CVE-2022-0264

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

USN-5278-1

USN-5337-1

USN-5368-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 363

• https://ubuntu.com/security/CVE-2022-22942 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05010 · Security Note
• https://ubuntu.com/security/CVE-2021-4155 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-39698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0264 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0264 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0435 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28711 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0264 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2041547 · Patch
• https://ubuntu.com/security/CVE-2021-45095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45402 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5368-1 · Vendor Advisory