CVE-2022-50490Out-of-bounds Read in Linux

CWE-125Out-of-bounds Read5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 98.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and return

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

NVDlinux/linux_kernel5.115.15.75+2
Debianlinux/linux_kernel< 6.0.3-1+2
CVEListV5linux/linux20b6cc34ea74b6a84599c1f8a70f3315b56a18830e13425104903970a5ede853082d3bbb4edec6f3+4
debiandebian/linux< linux 6.0.3-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2022-50490: In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and2025-10-04
GHSA
GHSA-49r4-jvjj-q7x6: In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_a2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: bpf: Propagate error from htab_lock_bucket() to userspace2025-10-04
Debian
CVE-2022-50490: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: Propag...2022