PT-2025-26093 · Linux+1 · Linux Kernel+1

Published 2025-06-18 · Updated 2026-04-20 · CVE-2022-50167

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential 32-bit overflow issue has been identified in the Linux kernel when accessing BPF array map elements. This occurs when the BPF array map exceeds 4GB, causing the element pointer calculation to overflow due to the use of u32 for both index and elem size. The issue is resolved by forcing 64-bit multiplication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

AZL-70361

BDU:2026-05849

CVE-2022-50167

OESA-2025-1727

OESA-2025-1728

Affected Products

Debian

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50167.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50057 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50167 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50167 · Vendor Advisory
• https://git.kernel.org/stable/c/87ac0d600943994444e24382a87aa19acc4cd3d4 · Patch
• https://ubuntu.com/security/CVE-2022-50167 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21927 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22026 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1727 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50230 · Security Note
• https://git.kernel.org/stable/c/3c7256b880b3a5aa1895fd169a34aa4224a11862 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38078 · Security Note
• https://git.kernel.org/stable/c/063e092534d4c6785228e5b1eb6e9329f66ccbe4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38031 · Security Note