PT-2025-40135 · Linux · Linux Kernel

Published 2025-10-01 · Updated 2025-10-01 · CVE-2022-50450

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The libbpf component in the Linux kernel contains an issue where it directly uses the e shnum field in the ELF header as the section header count. This can lead to a heap-buffer overflow in the bpf object open function when processing ELF files. The problem arises because libelf implements additional logic to determine the correct section header count when e shnum is zero and e shoff is not zero, a situation accommodated by the ELF specification. The inconsistency between libbpf and libelf's handling of section header counts can result in writing to a zero-entry calloc area. The issue was identified through oss-fuzz reports and affects the bpf object elf collect and bpf object open functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-50450

Affected Products

Linux Kernel

References · 11

• https://cve.org/CVERecord?id=CVE-2022-50450 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50450 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50450 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50450 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50450 · Vendor Advisory
• https://git.kernel.org/linus/51deedc9b8680953437dfe359e5268120de10e30 · Note
• https://twitter.com/CVEnew/status/1973391511451754824 · Twitter Post
• https://git.kernel.org/stable/c/51deedc9b8680953437dfe359e5268120de10e30 · Note
• https://git.kernel.org/stable/c/622ff59742fe7bf53c06a57332040fa0e08b8242 · Note
• https://git.kernel.org/stable/c/854f8c61422053f71e3cf0c4abf757c8aa5c748d · Note