Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48770

bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can return NULL on powerpc for kernel threads. This is then used in __bpf_get_stack() to check for user mode, resulting in a kernel oops. Guard against this by checking return value of task_pt_regs() before trying to obtain the call chain.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0 to < ff6bdc205fd0a83bd365405d4e31fb5905826996affected
  • fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0 to < 0bcd484587b3b3092e448d27dc369e347e1810c3affected
  • fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0 to < b82ef4985a6d05e80f604624332430351df7b79aaffected
  • fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0 to < b992f01e66150fc5e90be4a96f5eb8e634c8249eaffected

Linux Linux

Default version status: affected

  • 5.9affected
  • 0 to < 5.9unaffected
  • 5.10.96 to ≤ 5.10.*unaffected
  • 5.15.19 to ≤ 5.15.*unaffected
  • 5.16.5 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References