CVE-2022-3533: Linux Kernel BPF usdt.c parse_usdt_arg memory leak
A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parseusdtarg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument regname leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211031.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libbpfto a version that resolves this vulnerability.Fixed in 1.1.2-0+deb12u1Fixed in 1.5.0-3Fixed in 1.7.0-1 - Upgrade
Upgrade
debian/libbpfto a version that resolves this vulnerability.Fixed in 1.1.0-1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The severity vector indicates that exploitation requires adjacent-network access and low privileges. No user interaction is required.
What is the expected security impact?
The reported impact is limited to availability, with no stated confidentiality or integrity impact. The issue can cause a high availability impact through a memory leak.
What should teams do if they identify affected software?
Apply the available patch referenced for this issue. The provided information does not describe a configuration-based workaround or a method to determine whether the leak has already been triggered.