CVE-2022-0500: Buffer Overflow
A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
Other sources
Linux ebpf logic vulnerability leads to critical memory read and write,An attacker with capbpf can gain root privileges or container escape.
References:
https://bugzilla.redhat.com/showbug.cgi?id=2040599
— Red Hat
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by an out-of-bounds write flaw in the BPFBTFLOAD function in the BPF subsystem. By executing a specially-crafted eBPF program, an authenticated attacker could exploit this vulnerability to gain elevated privileges or crash the system.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0500?
CVE-2022-0500 is considered a high-severity vulnerability due to its potential to allow local users to escalate privileges or crash the system.
How do I fix CVE-2022-0500?
To fix CVE-2022-0500, update your Linux kernel to version 5.17 or later.
Which versions of the Linux kernel are affected by CVE-2022-0500?
CVE-2022-0500 affects Linux kernel versions prior to 5.17, as well as versions from 5.10 up to 5.15.37 and from 5.16 up to 5.16.11.
Can CVE-2022-0500 be exploited remotely?
No, CVE-2022-0500 requires local access to the system to exploit the vulnerability.
What impact does CVE-2022-0500 have on system integrity?
CVE-2022-0500 can compromise system integrity by allowing a local user to escalate their privileges and potentially alter critical system files.