CVE-2022-2905

An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

Score
CVSS 3.1 5.5 Medium
Status
Modified - secalert@redhat.com
Published
2022-09-09
Last modified
2026-10-14
Weaknesses
CWE-125

Affected products

References