CVE-2022-23222
kernel: local privileges escalation in kernel/bpf/verifier.c
Severity Score
Exploit Likelihood
Affected Versions
13Public Exploits
5Exploited in Wild
-Decision
Descriptions
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
El archivo kernel/bpf/verifier.c en el kernel de Linux versiones hasta 5.15.14, permite a usuarios locales alcanzar privilegios debido a una disponibilidad de la aritmética de punteros por medio de determinados tipos de punteros *_OR_NULL
A flaw was found in the Linux kernel's adjust_ptr_min_max_vals in the kernel/bpf/verifier.c function. In this flaw, a missing sanity check for *_OR_NULL pointer types that perform pointer arithmetic may cause a kernel information leak issue.
Nick Gregory discovered that the Linux kernel incorrectly handled network offload functionality. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by ARM to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitive information.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-01-14 CVE Reserved
- 2022-01-14 CVE Published
- 2022-06-07 First Exploit
- 2024-08-03 CVE Updated
- 2025-04-02 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-476: NULL Pointer Dereference
- CWE-763: Release of Invalid Pointer or Reference
CAPEC
References (18)
| URL | Date | SRC |
|---|---|---|
| https://github.com/tr3ee/CVE-2022-23222 | 2022-06-07 | |
| https://github.com/PenteraIO/CVE-2022-23222-POC | 2022-06-23 | |
| https://github.com/FridayOrtiz/CVE-2022-23222 | 2022-08-30 | |
| https://github.com/LeoMarche/ProjetSecu | 2023-03-11 | |
| http://www.openwall.com/lists/oss-security/2022/01/18/2 | 2024-08-03 |
| URL | Date | SRC |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2022/06/01/1 | 2024-03-25 |