CVE-2022-50883

kernel: bpf: Prevent decl_tag from being referenced in func_proto arg

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · July 22, 2026

Description

A flaw was found in the BPF Type Format (BTF) validation. A crafted BTF blob can reference a decl_tag type from a func_proto argument, bypassing intended validation and potentially causing issues during BPF program verification.

Statement

Exploiting this requires the ability to load BPF programs, which needs CAP_BPF or CAP_SYS_ADMIN. The impact is limited to causing BTF parsing issues rather than direct code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-1287 · Improper Validation of Specified Type of Input