CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace
In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from htablockbucket() to userspace
In htabmaplookupanddeletebatch() if htablockbucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucketcnt is greater than bucketsize or zero.
Fixing it by stopping batch operation and returning -EBUSY when htablockbucket() fails, and the application can retry or skip the busy batch as needed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50490?
CVE-2022-50490 has a medium severity level due to potential impacts on system stability.
How do I fix CVE-2022-50490?
To fix CVE-2022-50490, ensure that your Linux kernel is updated to the latest stable version that resolves this vulnerability.
What systems are affected by CVE-2022-50490?
CVE-2022-50490 affects the Linux Kernel across multiple distributions that utilize impacted versions.
What is the nature of the flaw in CVE-2022-50490?
CVE-2022-50490 involves improper error propagation from htab_lock_bucket() in the Linux kernel BPF system.
Are there any known exploits for CVE-2022-50490?
As of now, there are no public exploits reported for CVE-2022-50490.