CVE-2022-0433

Updated: 2023-11-07 20:02:43.050175

Description:

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 4.9
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-08 04:07:42
AlmaLinux 9.2 FIPS kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:12:19
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 09:30:02
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Not Vulnerable 2022-03-30 18:48:10
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Ignored 2022-09-28 05:02:49
Total: 11