CVE-2022-50167
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-06-18
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere by forcing 64-bit multiplication. Extract this formula into separate small helper and use it consistently in various places. Speculative-preventing formula utilizing index_mask trick is left as is, but explicit u64 casts are added in both places.
Weakness Classification (1)
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | c85d69135a9175c50a823d04d62d932312d037b3 < 2157ac13db8d5763835f1663bdabda6de744cba8 |
| Linux | Linux | c85d69135a9175c50a823d04d62d932312d037b3 < f665c56e6836933335e5a4513fc9b0bf47cdf81f |
| Linux | Linux | c85d69135a9175c50a823d04d62d932312d037b3 < 063e092534d4c6785228e5b1eb6e9329f66ccbe4 |
| Linux | Linux | c85d69135a9175c50a823d04d62d932312d037b3 < 3c7256b880b3a5aa1895fd169a34aa4224a11862 |
| Linux | Linux | c85d69135a9175c50a823d04d62d932312d037b3 < 87ac0d600943994444e24382a87aa19acc4cd3d4 |
| Linux | Linux | 5.3 |
| linux | linux_kernel | 5.3 – 5.18.18 |