CVE-2022-49875: bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
In the Linux kernel, the following vulnerability has been resolved:
bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:
dopin dopinany dopinfd mountbpffsforpin strlen(name) <- NULL pointer dereference
Fix it by adding validation to the common process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49875?
CVE-2022-49875 has a severity rating that reflects the potential for denial of service due to segmentation faults in the Linux kernel.
How do I fix CVE-2022-49875?
To fix CVE-2022-49875, update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2022-49875?
CVE-2022-49875 affects the Linux kernel, specifically when using bpftool to pin {PROG, MAP, LINK} without specifying a FILE.
What type of vulnerability is CVE-2022-49875?
CVE-2022-49875 is a vulnerability that leads to a NULL pointer dereference and potential segmentation fault.
When was CVE-2022-49875 first reported?
CVE-2022-49875 was reported and addressed in 2022 as part of kernel updates.