vulnerability
Ubuntu: (CVE-2022-50167): linux vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:S/C:N/I:C/A:C) | Jun 18, 2025 | Jun 26, 2025 | Nov 20, 2025 |
Severity
6
CVSS
(AV:L/AC:L/Au:S/C:N/I:C/A:C)
Published
Jun 18, 2025
Added
Jun 26, 2025
Modified
Nov 20, 2025
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix potential 32-bit overflow when accessing ARRAY map element
If BPF array map is bigger than 4GB, element pointer calculation can
overflow because both index and elem_size are u32. Fix this everywhere
by forcing 64-bit multiplication. Extract this formula into separate
small helper and use it consistently in various places.
Speculative-preventing formula utilizing index_mask trick is left as is,
but explicit u64 casts are added in both places.
Solution
no-fix-ubuntu-package
References
- CVE-2022-50167
- https://attackerkb.com/topics/CVE-2022-50167
- CWE-190
- URL-https://git.kernel.org/stable/c/063e092534d4c6785228e5b1eb6e9329f66ccbe4
- URL-https://git.kernel.org/stable/c/3c7256b880b3a5aa1895fd169a34aa4224a11862
- URL-https://git.kernel.org/stable/c/87ac0d600943994444e24382a87aa19acc4cd3d4
- URL-https://www.cve.org/CVERecord?id=CVE-2022-50167
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.