CVE-2022-50862

A flaw was found in the Linux kernel's BPF BTF (BPF Type Format) validation. The BTF parser allows a func_proto type to reference a decl_tag as its return type, which is invalid. When btf_type_id_size() encounters this unexpected type, it triggers a kernel warning. This can be exploited via the bpf() syscall to cause denial of service.

Loading BPF programs typically requires CAP_BPF or CAP_SYS_ADMIN capabilities in modern kernels, which limits exploitation to privileged users. The flaw results in a kernel warning rather than a crash in most configurations, though repeated triggering could impact system stability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.