VDB
CVE-2022-2785
CVE-2022-2785
PUBLISHED
CVSS 6.699999809265137 MEDIUM
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c
EPSS 0.26% · 18.2th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.26%
18.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | 0 |
| Linux Kernel | Kernel | 5.14, 5.18 |
Timeline
- Sep 23, 2022 CVE Published
- Sep 24, 2022 EPSS Score
- Nov 8, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Dec 30, 2022 EPSS Score
- Feb 7, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 24, 2023 EPSS Score
- May 9, 2023 EPSS Score
- Jun 23, 2023 EPSS Score
- Aug 7, 2023 EPSS Score
- Sep 21, 2023 EPSS Score