CVE-2022-0264: Medium severity Linux Linux kernel vulnerability
A flaw was found in the Linux kernel. There is an address leakage in BPF atomic fetch. This allows a local user with the ability to insert EBPF rules to be able to gather additional information for further attacks on the kernel.
Reference and upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=7d3baf0afa3aa9102d6a521a8e4c41888bb79882
Other sources
A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0264?
CVE-2022-0264 is considered a medium severity vulnerability due to potential information leakage.
How do I fix CVE-2022-0264?
To fix CVE-2022-0264, upgrade to the latest kernel version beyond 5.16 or apply the available patches from your distribution.
Who is affected by CVE-2022-0264?
CVE-2022-0264 affects local users with the ability to insert eBPF rules on Linux kernel versions up to 5.16.
What impact can CVE-2022-0264 have?
CVE-2022-0264 allows a local user to leak memory addresses, which could lead to further attacks on the kernel.
Is CVE-2022-0264 exploitable remotely?
CVE-2022-0264 is not exploitable remotely as it requires local access to exploit the vulnerability.