Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-23222
HistoryJan 14, 2022 - 12:00 a.m.

CVE-2022-23222

2022-01-1400:00:00
ubuntu.com
ubuntu.com
110
linux kernel
privilege escalation
bpf verifier
pointer arithmetic
cve-2022-23222
ubuntu 21.10
unprivileged bpf

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

JSON

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local
users to gain privileges because of the availability of pointer arithmetic
via certain *_OR_NULL pointer types.

Notes

Author Note
sbeattie Ubuntu 21.10 / 5.13+ kernels disable unprivileged BPF by default. kernels 5.8 and older are not affected, priority high is for 5.10 and 5.11 based kernels only
OSVersionArchitecturePackageVersionFilename
ubuntu21.10noarchlinux< 5.13.0-37.42UNKNOWN
ubuntu21.10noarchlinux-aws< 5.13.0-1019.21UNKNOWN
ubuntu20.04noarchlinux-aws-5.13< 5.13.0-1019.21~20.04.1UNKNOWN
ubuntu21.10noarchlinux-azure< 5.13.0-1021.24UNKNOWN
ubuntu20.04noarchlinux-azure-5.13< 5.13.0-1021.24~20.04.1UNKNOWN
ubuntu21.10noarchlinux-gcp< 5.13.0-1021.25UNKNOWN
ubuntu20.04noarchlinux-gcp-5.13< 5.13.0-1021.25~20.04.1UNKNOWN
ubuntu20.04noarchlinux-hwe-5.13< 5.13.0-37.42~20.04.1UNKNOWN
ubuntu20.04noarchlinux-intel-5.13< 5.13.0-1010.10UNKNOWN
ubuntu21.10noarchlinux-kvm< 5.13.0-1018.19UNKNOWN
Rows per page:
1-10 of 151

Related

redhatcve 1
cbl_mariner 2
cnvd 1
githubexploit 6
debiancve 1
cve 1
nvd 1
prion 1
cvelist 1
openvas 16
fedora 2
nessus 24
photon 6
mageia 4
osv 9
debian 1
ubuntu 4
slackware 1
suse 2
redhat 4
ibm 2
rocky 2
oraclelinux 1
redhatcve
redhatcve
CVE-2022-23222
2022-01-21 13:46:32
cbl_mariner
cbl_mariner
CVE-2022-23222 affecting package kernel for versions less than 5.15.18.1-1
2022-04-09 06:52:47
CVE-2022-23222 affecting package kernel 5.10.189.1-1
2022-02-01 04:54:07
cnvd
cnvd
Linux kernel code issue vulnerability (CNVD-2022-06892)
2022-01-18 00:00:00
githubexploit
githubexploit
Exploit for NULL Pointer Dereference in Linux Linux Kernel
2022-06-07 03:20:23
Exploit for NULL Pointer Dereference in Linux Linux Kernel
2022-07-09 19:28:46
Exploit for NULL Pointer Dereference in Linux Linux Kernel
2022-07-09 19:28:46
debiancve
debiancve
CVE-2022-23222
2022-01-14 08:15:07
cve
cve
CVE-2022-23222
2022-01-14 08:15:07
nvd
nvd
CVE-2022-23222
2022-01-14 08:15:07
prion
prion
Null pointer dereference
2022-01-14 08:15:00
cvelist
cvelist
CVE-2022-23222
2022-01-14 00:00:00
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2022-edbd74424e)
2022-02-28 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-952bb7b856)
2022-02-26 00:00:00
Mageia: Security Advisory (MGASA-2022-0195)
2022-05-23 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.16.11-100.fc34
2022-02-27 03:22:24
[SECURITY] Fedora 35 Update: kernel-5.16.11-200.fc35
2022-02-25 16:56:39
nessus
nessus
Photon OS 3.0: Linux PHSA-2022-3.0-0351
2024-07-24 00:00:00
Photon OS 4.0: Linux PHSA-2022-4.0-0145
2024-07-23 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-083)
2022-09-06 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0351
2022-01-08 00:00:00
Moderate Photon OS Security Update - PHSA-2021-0461
2021-11-29 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0351
2022-01-13 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-05-21 11:50:18
Updated kernel-linus packages fix security vulnerabilities
2022-01-18 18:43:35
Updated kernel packages fix security vulnerabilities
2022-05-21 11:50:18
osv
osv
linux - security update
2022-01-20 00:00:00
linux-intel-5.13 vulnerabilities
2022-04-01 01:11:38
linux-oem-5.14 vulnerabilities
2022-02-09 02:16:11
debian
debian
[SECURITY] [DSA 5050-1] linux security update
2022-01-20 16:46:05
ubuntu
ubuntu
Linux kernel (Intel IOTG) vulnerabilities
2022-04-01 00:00:00
Linux kernel (OEM) vulnerabilities
2022-02-09 00:00:00
Linux kernel vulnerabilities
2022-03-22 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-05-09 21:58:04
suse
suse
Security update for the Linux Kernel (important)
2022-07-22 00:00:00
Security update for the Linux Kernel (important)
2022-08-01 00:00:00
redhat
redhat
(RHSA-2024:2950) Moderate: kernel-rt security and bug fix update
2024-05-22 06:35:10
(RHSA-2024:3138) Moderate: kernel security, bug fix, and enhancement update
2024-05-22 06:35:43
(RHSA-2024:0724) Important: kernel security and bug fix update
2024-02-07 16:01:29
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities
2024-06-07 15:32:38
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-06-26 16:06:34
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel security, bug fix, and enhancement update
2024-06-14 13:59:16
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2024-05-23 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

JSON
Related for UB:CVE-2022-23222
redhatcve1cbl_mariner2cnvd1githubexploit6debiancve1cve1nvd1prion1cvelist1openvas16fedora2nessus24photon6mageia4osv9debian1ubuntu4slackware1suse2redhat4ibm2rocky2oraclelinux1