PT-2022-7488 · Linux+5 · Linux Kernel+5
Kumar Kartikeya Dwivedi
·
Published
2022-02-16
·
Updated
2026-05-26
·
CVE-2022-48929
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a crash due to out of bounds access into
reg2btf ids in the Linux kernel's bpf component. This occurred after a commit added kfunc support and defined reg2btf ids as a way to translate the verifier reg type to the appropriate btf vmlinux BTF ID. However, another commit moved BPF REG TYPE MAX from the last member of bpf reg type enum to after the base register types, defining other variants using type flag composition. As a result, the direct usage of reg->type to index into reg2btf ids may no longer fall into the BPF REG TYPE MAX range, leading to out of bounds access and a kernel crash on dereference of a bad pointer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Red Hat
Red Os
Suse