PT-2025-8156 · Linux+3 · Linux Kernel+3
Syzbot
·
Published
2022-02-03
·
Updated
2025-09-29
·
CVE-2022-49228
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the version that includes the fix for the btf decl tag bug
Description
A bug in the Linux kernel's btf decl tag functionality has been identified, which can cause a general protection fault due to a null pointer dereference. The issue occurs when a function type is tagged with a decl tag, and the kernel attempts to access the func proto type, resulting in a KASAN error. The bug is triggered by an illegal BTF with a func type that has a func proto type out of range. The estimated number of potentially affected devices is not specified.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the btf decl tag bug. As a temporary workaround, consider disabling the btf functionality until a patch is available. Restrict access to the btf module to minimize the risk of exploitation. Avoid using the
btf decl tag resolve function in the affected API endpoint until the issue is resolved. Apply the patch that implements the 'resolve' callback function for func types properly, which will also be called in btf check all types for func types.Exploit
Fix
Improper Resource Release
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Suse