Back to Database
Status published
Medium
CVE-2022-2785
Arbitrary Memory read in BPF Linux Kernel
Vulnerability Description
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2785
Credits & Attribution
No credits recorded in the NVD database.
References
More from Linux Kernel
View All →CVE-2022-2503
Linux Kernel LoadPin bypass via dm-verity table reload
Medium
6.9
CVE-2022-2327
Use-after-free in io_uring ad work_flags in Linux Kernel
High
7.5
CVE-2021-23134
Linux kernel llcp_sock_bind/connect use-after-free
High
7.8
CVE-2021-23133
Linux Kernel sctp_destroy_sock race condition
Medium
6.7
CVE-2021-22600
Double Free in net/packet/af_packet.c leading to priviledge escalation
Medium
6.6
Affected Vendor
Linux Kernel
View all reports →Affected Software
Kernel
Vulnerable Versions:
5.14, 5.18
Timeline
Official Publish:
September 23rd, 2022
Last Modified:
April 21st, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H