CVE-2022-49967
published 2025-06-18CVE-2022-49967: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While reading bpf_jit_limit, it can be changed…
PriorityP414medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.12%
2.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a data-race around bpf_jit_limit.
While reading bpf_jit_limit, it can be changed concurrently via sysctl,
WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit
is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.19.11-1 (bookworm) | linux 5.19.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.14.140 < 4.15 | 4.15 |
| linux | linux | >= 4.19.47 < 4.20 | 4.20 |
| linux | linux | >= 4.9.190 < 4.10 | 4.10 |
| linux | linux | >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < ba632ad0bacb13197a8f38e7526448974e87f292 | ba632ad0bacb13197a8f38e7526448974e87f292 |
| linux | linux | >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < 0947ae1121083d363d522ff7518ee72b55bd8d29 | 0947ae1121083d363d522ff7518ee72b55bd8d29 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 4.14.140 < 4.15 | 4.15 |
| linux | linux_kernel | >= 4.19.47 < 5.19.8 | 5.19.8 |
| linux | linux_kernel | >= 4.9.190 < 4.10 | 4.10 |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_msrc4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: bpf: Fix a data-race around bpf_jit_limit.
vendor_redhat·2025-06-18·CVSS 4.7
CVE-2022-49967 [MEDIUM] CWE-367 kernel: bpf: Fix a data-race around bpf_jit_limit.
kernel: bpf: Fix a data-race around bpf_jit_limit.
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a data-race around bpf_jit_limit.
While reading bpf_jit_limit, it can be changed concurrently via sysctl,
WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit
is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 9)
Microsoft
bpf: Fix a data-race around bpf_jit_limit.
vendor_msrc·2025-06-10·CVSS 4.7
CVE-2022-49967 [MEDIUM] CWE-362 bpf: Fix a data-race around bpf_jit_limit.
bpf: Fix a data-race around bpf_jit_limit.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Debian
CVE-2022-49967: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a ...
vendor_debian·2022·CVSS 4.7
CVE-2022-49967 [MEDIUM] CVE-2022-49967: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a ...
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While reading bpf_jit_limit, it can be changed concurrently via sysctl, WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
Scope: local
bookworm: resolved (fixed in 5.19.11-1)
bullseye: open
forky: resolved (fixed in 5.19.11-1)
sid: resolved (fixed in 5.19.11-1)
trixie: resolved (fixed in 5.19.11-1)
OSV
CVE-2022-49967: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit
osv·2025-06-18·CVSS 4.7
CVE-2022-49967 [MEDIUM] CVE-2022-49967: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While reading bpf_jit_limit, it can be changed concurrently via sysctl, WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
GHSA
GHSA-f2f7-qfwq-94j2: In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a data-race around bpf_jit_limit
ghsa_unreviewed·2025-06-18
CVE-2022-49967 [MEDIUM] CWE-362 GHSA-f2f7-qfwq-94j2: In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a data-race around bpf_jit_limit
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a data-race around bpf_jit_limit.
While reading bpf_jit_limit, it can be changed concurrently via sysctl,
WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit
is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
OSV
linux-raspi-5.4 vulnerabilities
osv·2025-01-15·CVSS 4.7
CVE-2022-38096 linux-raspi-5.4 vulnerabilities
linux-raspi-5.4 vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not
properly handle certain error conditions, leading to a NULL pointer
dereference. A local attacker could possibly trigger this vulnerability to
cause a denial of service. (CVE-2022-38096)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Network drivers;
- SCSI subsystem;
- Ext4 file system;
- Bluetooth subsystem;
- Memory management;
- Amateur Radio drivers;
- Network traffic control;
- Sun RPC protocol;
- VMware vSockets driver;
(CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967,
CVE-2024-50264, CVE-2024-36952, CVE-2024-3855
No detection rules found.
No public exploits indexed.
2025-06-18
Published