CVE-2022-2905 — Vulnerability intelligence

linux — linux kernel

Published: 2022-09-09T15:15:10.170

CVSS

5.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

Sources

• CVE-2022-2905
• Exploit, Issue Tracking, Patch, Third Party Advisory
• Mailing List, Third Party Advisory
• Original advisory
• Original advisory
• Original advisory