CVE-2022-23222: Null Pointer Dereference
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain ORNULL pointer types.
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper input validation by the bpf verifier in kernel/bpf/verifier.c. By executing a specially-crafted eBPF program with certain ORNULL pointer types, an authenticated attacker could exploit this vulnerability to gain elevated privileges and execute code in the context of the kernel.
— IBM
Local privileges escalation possible because of the availability of pointer arithmetic via certain ORNULL pointer types in kernel/bpf/verifier.c.
Reference:
https://www.openwall.com/lists/oss-security/2022/01/13/1
— Red Hat
Affected Software
Remediation
Patch Available
Mitigation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23222?
CVE-2022-23222 is considered a high severity vulnerability as it allows local users to gain elevated privileges in the Linux kernel.
How do I fix CVE-2022-23222?
To fix CVE-2022-23222, update the Linux kernel to version 5.17 or higher.
Which versions of Linux Kernel are affected by CVE-2022-23222?
CVE-2022-23222 affects Linux kernel versions from 5.8.0 to 5.15.14, excluding version 5.17.
What types of attacks are possible due to CVE-2022-23222?
CVE-2022-23222 allows for local privilege escalation attacks due to exploitable pointer arithmetic.
Is my system vulnerable to CVE-2022-23222 if I am using Debian 11?
Yes, Debian 11 can be vulnerable to CVE-2022-23222 if it uses an affected version of the Linux kernel.