PT-2025-25995 · Linux+3 · Linux Kernel+3

Published 2022-07-29 · Updated 2025-06-18 · CVE-2022-50069

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc7

Description A potential bad pointer dereference issue exists in the bpf sys bpf() helper function, which allows an eBPF program to load another eBPF program from within the kernel. The issue arises when the argument union bpf attr pointer is a kernel address instead of a userspace address. This can lead to problems when an eBPF syscall program tries to call bpf sys bpf() to load a program but provides a bad insns pointer. The code is always happy to dereference the bad pointer, triggering a page fault and an oops.

Recommendations For Linux kernel versions prior to 5.19.0-rc7, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting the use of the bpf sys bpf() helper function until a patch is available. Avoid using the insns pointer in the bpf attr union to minimize the risk of exploitation.

Exploit

Fix

RCE

NULL Pointer Dereference

Weakness Enumeration

CWE-20

CWE-476

Related Identifiers

BDU:2026-03129

CESA-2022_7683

CVE-2022-50069

RHSA-2022:7683

RHSA-2022_7683

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50069.json · Exploit
• https://git.kernel.org/stable/c/e2dcac2f58f5a95ab092d1da237ffdc0da1832cf · Patch
• https://osv.dev/vulnerability/CVE-2022-50069 · Vendor Advisory
• https://git.kernel.org/stable/c/1f6db7148ed7382b336c5827af33b5d9e992630e · Patch
• https://git.kernel.org/stable/c/41fd6cc88aaf7058b9dfc9c7a09cc80f99c8c830 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50069 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50069 · Security Note
• https://bdu.fstec.ru/vul/2026-03129 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50069 · Security Note
• https://ubuntu.com/security/CVE-2022-50069 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50069 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1935356210506567931 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.63 · Note