CVE-2022-23222: Null Pointer Dereference

Published Jan 14, 2022
·
Updated

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain ORNULL pointer types.

Other sources

Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper input validation by the bpf verifier in kernel/bpf/verifier.c. By executing a specially-crafted eBPF program with certain ORNULL pointer types, an authenticated attacker could exploit this vulnerability to gain elevated privileges and execute code in the context of the kernel.

IBM

Local privileges escalation possible because of the availability of pointer arithmetic via certain ORNULL pointer types in kernel/bpf/verifier.c.

Reference:

https://www.openwall.com/lists/oss-security/2022/01/13/1

Red Hat

Affected Software

43 affected componentsFixes available
Linux Linux kernel>=5.8.0<5.15.37
Linux Linux kernel>=5.16<5.16.11
Debian Debian Linux=11.0
All of the following
NetApp H410c
NetApp H410c Firmware
All of the following
NetApp H300s
NetApp H300s Firmware
All of the following
NetApp H500s
NetApp H500s Firmware
All of the following
NetApp H700s
NetApp H700s Firmware
All of the following
NetApp H300e
NetApp H300e Firmware
All of the following
NetApp H500e
NetApp H500e Firmware
All of the following
NetApp H700e
NetApp H700e Firmware
All of the following
NetApp H410s Firmware
NetApp H410s
Fedoraproject Fedora=34
Fedoraproject Fedora=35
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
IBM Security Verify Governance<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2
IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
redhat/kernel<5.17
5.17

Remediation

Mitigation

seth-arnold> set kernel.unprivileged_bpf_disabled to 1

Event History

Jan 14, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 21, 2022
Data Sourced
via Red Hat·12:53 PM
DescriptionSeverityAffected Software
Mar 28, 2024
Data Sourced
via Launchpad·12:38 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:46 AM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-23222?

CVE-2022-23222 is considered a high severity vulnerability as it allows local users to gain elevated privileges in the Linux kernel.

2

How do I fix CVE-2022-23222?

To fix CVE-2022-23222, update the Linux kernel to version 5.17 or higher.

3

Which versions of Linux Kernel are affected by CVE-2022-23222?

CVE-2022-23222 affects Linux kernel versions from 5.8.0 to 5.15.14, excluding version 5.17.

4

What types of attacks are possible due to CVE-2022-23222?

CVE-2022-23222 allows for local privilege escalation attacks due to exploitable pointer arithmetic.

5

Is my system vulnerable to CVE-2022-23222 if I am using Debian 11?

Yes, Debian 11 can be vulnerable to CVE-2022-23222 if it uses an affected version of the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203