CVE-2022-0433

—

CVSS 3.1

5.5 medium

EPSS

<1%p22

Published

Mar 10, 2022 (Mar 10, 2022)

Modified

Jun 17, 2026

Description

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.

Vendors: linux fedoraproject
Products: linux kernel, fedora
Weakness: CWE-908, CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.