CVE-2022-49967
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
24/100
Published: 2025-06-18
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While reading bpf_jit_limit, it can be changed concurrently via sysctl, WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit is long, so we need to add a paired READ_ONCE() to avoid load-tearing.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < ba632ad0bacb13197a8f38e7526448974e87f292 |
| Linux | Linux | ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < 0947ae1121083d363d522ff7518ee72b55bd8d29 |
| Linux | Linux | c98446e1bab6253ddce7144cc2a91c400a323839 |
| Linux | Linux | a1fe647042affe713a17243cd10e9b25f3d83948 |
| Linux | Linux | 43caa29c99db5a41b204e8ced01b00e151335ca8 |
| Linux | Linux | 4.9.190 < 4.10 |
| Linux | Linux | 4.14.140 < 4.15 |
| Linux | Linux | 4.19.47 < 4.20 |
| Linux | Linux | 4.20 |
| linux | linux_kernel | 4.9.190 – 4.10 |
| linux | linux_kernel | 6.0 |
| linux | linux_kernel | 6.0 |
| linux | linux_kernel | 6.0 |
References & Advisories (2)
Patch
Patch