CVE-2022-50883 — Improper Validation of Specified Type of Input in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Prevent decl_tag from being referenced in func_proto arg
Syzkaller managed to hit another decl_tag issue:
btf_func_proto_check kernel/bpf/btf.c:4506 [inline]
btf_check_all_types kernel/bpf/btf.c:4734 [inline]
btf_parse_type_sec+0x1175/0x1980 kernel/bpf/btf.c:4763
btf_parse kernel/bpf/btf.c:5042 [inline]
btf_new_fd+0x65a/0xb00 kernel/bpf/btf.c:6709
bpf_btf_load+0x6f/0x90 kernel/bpf/syscall.c:4342
__sys_bpf+0x50a/0x6c0 ker…
Affected Packages4 packages
▶CVEListV5linux/linuxb5ea834dde6b6e7f75e51d5f66dac8cd7c97b5ef — 3f3d54962a032581996edda8e6bcbf7a30371234+3
🔴Vulnerability Details
3OSV▶
CVE-2022-50883: In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent decl_tag from being referenced in func_proto arg Syzkaller managed to↗2025-12-30
GHSA▶
GHSA-qw5g-ghj8-55p6: In the Linux kernel, the following vulnerability has been resolved:
bpf: Prevent decl_tag from being referenced in func_proto arg
Syzkaller managed↗2025-12-30