← Database

CVE-2022-2905

MEDIUM CVSS: 5.5 Published: 2022-09-09 Modified: 2026-06-17

Description

An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

Affected Platforms

Debian Debian LinuxLinux Linux KernelRedhat Enterprise Linux

Weakness Type

CWE-125, CWE-125

References