CVE-2022-23222

Related Vulnerabilities: CVE-2022-23222  

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

Description

The MITRE CVE dictionary describes this issue as:

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

Additional Information

  • Bugzilla 2043520: CVE-2022-23222 kernel: local privileges escalation in kernel/bpf/verifier.c
  • CWE-763: Release of Invalid Pointer or Reference
  • FAQ: Frequently asked questions about CVE-2022-23222