NetSight
IP …
high7.8

CVE-2022-0500

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to th…

Impact

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10 before 5.15.37
from 5.16 before 5.16.11
FedoraprojectFedora
Versions 34, 35
NetappH300e Firmware
All versions
NetappH300s Firmware
All versions
NetappH410c Firmware
All versions
NetappH410s Firmware
All versions
NetappH500e Firmware
All versions
NetappH500s Firmware
All versions
NetappH700e Firmware
All versions
NetappH700s Firmware
All versions

Weakness classification

CWE-119CWE-787

References