CVE-2022-0264

🗓️ 04 Feb 2022 00:00:00Reported by redhatType

A vulnerability found in Linux kernel's eBPF verifier allows leakage of internal memory to userspace

Reporter	Title	Published	Views	Family All 224
CBLMariner	CVE-2022-0264 affecting package kernel for versions less than 5.15.26.1-1	9 Apr 202206:52	–	cbl_mariner
CBLMariner	CVE-2022-0264 affecting package kernel 5.10.189.1-1	10 Mar 202223:47	–	cbl_mariner
CNNVD	Linux kernel 信息泄露漏洞	4 Feb 202200:00	–	cnnvd
CNVD	Linux kernel information disclosure vulnerability (CNVD-2022-13356)	10 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-0264	4 Feb 202200:00	–	cvelist
Debian CVE	CVE-2022-0264	4 Feb 202200:00	–	debiancve
EUVD	EUVD-2022-15447	3 Oct 202520:07	–	euvd
Microsoft CVE	A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6	11 Feb 202208:00	–	mscve
NVD	CVE-2022-0264	4 Feb 202223:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-5337-1)	23 Mar 202200:00	–	openvas

NVD

Vulners

Node

linux linux_kernelRange<5.16

linux linux_kernelMatch5.16-

linux linux_kernelMatch5.16rc1

linux linux_kernelMatch5.16rc2

linux linux_kernelMatch5.16rc3

linux linux_kernelMatch5.16rc4

linux linux_kernelMatch5.16rc5

[
  {
    "vendor": "n/a",
    "product": "kernel",
    "versions": [
      {
        "version": "kernel v5.16-rc6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2024 06:38Current

5.7Medium risk

Vulners AI Score5.7

CVSS 22.1

CVSS 3.15.5

EPSS0.00087

CWE-755