CVE-2022-23222

Description

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

Affected Platforms

Weakness Type

CWE-476

References

• http://www.openwall.com/lists/oss-security/2022/01/14/1
• http://www.openwall.com/lists/oss-security/2022/01/18/2
• http://www.openwall.com/lists/oss-security/2022/06/01/1
• http://www.openwall.com/lists/oss-security/2022/06/04/3
• http://www.openwall.com/lists/oss-security/2022/06/07/3
• https://bugzilla.suse.com/show_bug.cgi?id=1194765