A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF

Summary

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

Timeline

1. Mar 25, 2022, 6:03 PM UTCCVE published
2. Oct 8, 2026, 9:09 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Oct 8, 2026, 9:13 PM UTCRecord last updated

Affected versions

• n/a kernel

  Linux kernel 5.17-rc1

• :linux_kernel:Android

  From :0 · fixed in :2022-12-05

References 9