Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68369
HistorySep 26, 2022 - 12:00 a.m.

Linux Kernel Arbitrary Memory Read Vulnerability

2022-09-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
linux kernel
memory read
vulnerability
resource management
cap_bpf
sensitive information

0.0004 Low

EPSS

Percentile

12.7%

The Linux Kernel is an open source Unix-like operating system macro kernel for efficient resource management. A security vulnerability exists in the Linux Kernel where the constants used to populate the pointers in the structures passed to bpf_sys_bpf are unverified and can point anywhere, and an attacker with CAP_BPF can read memory arbitrarily from any location on the system. An attacker could use this vulnerability to obtain sensitive information.

0.0004 Low

EPSS

Percentile

12.7%