SECUFOCUSNOW
Home›CVE index›CVE-2022-49985
Review reviewHigh

CVE-2022-49985

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnum_range on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in bpf_int_jit_compile+0x1257/0x13f0 Read of size 8 at addr ffff888004e90b58 by task syz-executor.0/1489 CPU: 1 PID: 1489 Comm: syz-executor.0 Not tainted 5.19.0 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x9c/0xc9 print_address_des...

CVSS
7.1
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.06.18
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnum_range on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in bpf_int_jit_compile+0x1257/0x13f0 Read of size 8 at addr ffff888004e90b58 by task syz-executor.0/1489 CPU: 1 PID: 1489 Comm: syz-executor.0 Not tainted 5.19.0 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x9c/0xc9 print_address_des...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= d2e4c1e6c2947269346054ac8937ccfe9e0bcc6b < e8979807178434db8ceaa84dfcd44363e71e50bb, >= d2e4c1e6c2947269346054ac8937ccfe9e0bcc6b < 4f672112f8665102a5842c170be1713f8ff95919, >= d2e4c1e6c2947269346054ac8937ccfe9e0bcc6b < a36df92c7ff7ecde2fb362241d0ab024dddd0597, >= d2e4c1e6c2947269346054ac8937ccfe9e0bcc6b < a657182a5c5150cdfacb6640aad1d2712571a409, >= 5.5, >= 5.5 < 5.10.140, >= 5.11 < 5.15.64, >= 5.16 < 5.19.6, 6.0
Fixed versions
5.10.140, 5.15.64, 5.19.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
CWE-125