CVE-2022-50167

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50167

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere by forcing 64-bit multiplication. Extract this formula into separate small helper and use it consistently in various places. Speculative-preventing formula utilizing index_mask trick is left as is, but explicit u64 casts are added in both places.

References
Link Resource
https://git.kernel.org/stable/c/063e092534d4c6785228e5b1eb6e9329f66ccbe4 Patch
https://git.kernel.org/stable/c/3c7256b880b3a5aa1895fd169a34aa4224a11862 Patch
https://git.kernel.org/stable/c/87ac0d600943994444e24382a87aa19acc4cd3d4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Nov 2025, 19:48

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: se corrige un posible desbordamiento de 32 bits al acceder al elemento del mapa de matriz. Si el mapa de matriz BPF supera los 4 GB, el cálculo del puntero del elemento puede desbordarse, ya que tanto el índice como el tamaño de elem son u32. Se corrige este problema en todas partes forzando la multiplicación de 64 bits. Se extrae esta fórmula en un pequeño ayudante independiente y se usa de forma consistente en varios lugares. La fórmula que evita la especulación mediante el truco de index_mask se mantiene sin cambios, pero se añaden conversiones u64 explícitas en ambos lugares.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/063e092534d4c6785228e5b1eb6e9329f66ccbe4 - () https://git.kernel.org/stable/c/063e092534d4c6785228e5b1eb6e9329f66ccbe4 - Patch
References () https://git.kernel.org/stable/c/3c7256b880b3a5aa1895fd169a34aa4224a11862 - () https://git.kernel.org/stable/c/3c7256b880b3a5aa1895fd169a34aa4224a11862 - Patch
References () https://git.kernel.org/stable/c/87ac0d600943994444e24382a87aa19acc4cd3d4 - () https://git.kernel.org/stable/c/87ac0d600943994444e24382a87aa19acc4cd3d4 - Patch
CWE CWE-190
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-17 19:48

NVD link : CVE-2022-50167

Mitre link : CVE-2022-50167

CVE.ORG link : CVE-2022-50167

JSON object : View

Products Affected

linux

CWE
CWE-190

Integer Overflow or Wraparound