CVE-2022-50167

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50167
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50167.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50167
Downstream
AZL (1)
DEBIAN (1)
OESA (2)
ROOT (2)
UBUNTU (1)
Published
2025-06-18T11:03:20Z
Modified
2026-11-01T02:30:23Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
bpf: fix potential 32-bit overflow when accessing ARRAY map element
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix potential 32-bit overflow when accessing ARRAY map element

If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere by forcing 64-bit multiplication. Extract this formula into separate small helper and use it consistently in various places.

Speculative-preventing formula utilizing index_mask trick is left as is, but explicit u64 casts are added in both places.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50167.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c85d69135a9175c50a823d04d62d932312d037b3
Fixed
2157ac13db8d5763835f1663bdabda6de744cba8
Fixed
f665c56e6836933335e5a4513fc9b0bf47cdf81f
Fixed
063e092534d4c6785228e5b1eb6e9329f66ccbe4
Fixed
3c7256b880b3a5aa1895fd169a34aa4224a11862
Fixed
87ac0d600943994444e24382a87aa19acc4cd3d4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50167.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.3.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50167.json"