p PatchFirst

CVE-2022-50219

CVE-2022-50219 · bpf: Fix KASAN use-after-free Read in compute_effective_progs

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix KASAN use-after-free Read in compute_effective_progs Syzbot found a Use After Free bug in compute_effective_progs(). The reproducer creates a number of BPF links, and causes a fault injected alloc to fail, while calling bpf_link_detach on them. Link detach triggers the link to be freed by bpf_link_free(), which calls __cgroup_bpf_detach() and update_effective_progs(). If the memory allocation in this function fails, the function restores the pointer to the bpf_cgroup_link on the cgroup list, but the memory gets freed just after it returns. After this, every subsequent call to update_effective_progs() causes this already deallocated pointer to be dereferenced in prog_list_length(), and triggers KASAN UAF error. To fix this issue don't preserve the pointer to the prog or link in the list, but remove it and replace it with a dummy prog without shrinking the table. The subsequent call to __cgroup_bpf_detach() or __cgroup_bpf_detach() will correct it.

CVSS 7.8 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • linux

    Versions
    • ≥ af6eea57437a830293eab56246b6025cc7d46ee7, < 3527e3cbb84d8868c4d4e91ba55915f96d39ec3d: Affected (git)
    • ≥ af6eea57437a830293eab56246b6025cc7d46ee7, < 1f8ca9c40e6222ce431e9ba5dae3cccce8ef9443: Affected (git)
    • ≥ af6eea57437a830293eab56246b6025cc7d46ee7, < 6336388715afa419cc97d0255bda3bba1b96b7ca: Affected (git)
    • ≥ af6eea57437a830293eab56246b6025cc7d46ee7, < be001f9da71eaa3b61e186fb88bde3279728bdca: Affected (git)
    • ≥ af6eea57437a830293eab56246b6025cc7d46ee7, < 4c46091ee985ae84c60c5e95055d779fcd291d87: Affected (git)

    No fix published

  • linux

    Versions
    • 5.7: Affected
    • ≥ 0, < 5.7: Not affected (semver)
    • ≥ 5.10.138, ≤ 5.10.*: Not affected (semver)
    • ≥ 5.15.61, ≤ 5.15.*: Not affected (semver)
    • ≥ 5.18.18, ≤ 5.18.*: Not affected (semver)
    • ≥ 5.19.2, ≤ 5.19.*: Not affected (semver)
    • ≥ 6.0: Not affected (original_commit_for_fix)

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 6.0.2-1

    Update to 6.0.2-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.0.2-1

    Update to 6.0.2-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 6.0.2-1

    Update to 6.0.2-1

  • linux-hwe-edge Ubuntu:16.04:LTS

    Versions
    • 4.8.0-28.30~16.04.1
    • 4.8.0-30.32~16.04.1
    • 4.8.0-32.34~16.04.1
    • 4.8.0-34.36~16.04.1
    • 4.10.0-14.16~16.04.1
    • 4.10.0-19.21~16.04.1
    • 4.10.0-20.22~16.04.1
    • 4.10.0-21.23~16.04.1
    • 4.10.0-22.24~16.04.1
    • 4.10.0-24.28~16.04.1
    • 4.10.0-26.30~16.04.1
    • 4.11.0-13.19~16.04.1
    • 4.11.0-14.20~16.04.1
    • 4.13.0-16.19~16.04.3
    • 4.13.0-17.20~16.04.1
    • 4.13.0-19.22~16.04.1
    • 4.13.0-21.24~16.04.1
    • 4.13.0-25.29~16.04.2
    • 4.15.0-13.14~16.04.1
    • 4.15.0-15.16~16.04.1
    • 4.15.0-20.21~16.04.1
    • 4.15.0-22.24~16.04.1
    • 4.15.0-23.25~16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-aws-5.0 Ubuntu:18.04:LTS

    Versions
    • 5.0.0-1021.24~18.04.1
    • 5.0.0-1022.25~18.04.1
    • 5.0.0-1023.26~18.04.1
    • 5.0.0-1024.27~18.04.1
    • 5.0.0-1025.28
    • 5.0.0-1027.30
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-aws-5.3 Ubuntu:18.04:LTS

    Versions
    • 5.3.0-1016.17~18.04.1
    • 5.3.0-1017.18~18.04.1
    • 5.3.0-1019.21~18.04.1
    • 5.3.0-1023.25~18.04.1
    • 5.3.0-1028.30~18.04.1
    • 5.3.0-1030.32~18.04.1
    • 5.3.0-1032.34~18.04.2
    • 5.3.0-1033.35
    • 5.3.0-1034.36
    • 5.3.0-1035.37
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure Ubuntu:18.04:LTS

    Versions
    • 4.15.0-1002.2
    • 4.15.0-1003.3
    • 4.15.0-1004.4
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1012.12
    • 4.15.0-1013.13
    • 4.15.0-1014.14
    • 4.15.0-1018.18
    • 4.15.0-1019.19
    • 4.15.0-1021.21
    • 4.15.0-1022.23
    • 4.15.0-1023.24
    • 4.15.0-1025.26
    • 4.15.0-1028.29
    • 4.15.0-1030.31
    • 4.15.0-1031.32
    • 4.15.0-1032.33
    • 4.15.0-1035.36
    • 4.15.0-1036.38
    • 4.15.0-1037.39
    • 4.18.0-1011.11~18.04.1
    • 4.18.0-1013.13~18.04.1
    • 4.18.0-1014.14~18.04.1
    • 4.18.0-1018.18~18.04.1
    • 4.18.0-1019.19~18.04.1
    • 4.18.0-1020.20~18.04.1
    • 4.18.0-1023.24~18.04.1
    • 4.18.0-1024.25~18.04.1
    • 4.18.0-1025.27~18.04.1
    • 5.0.0-1014.14~18.04.1
    • 5.0.0-1016.17~18.04.1
    • 5.0.0-1018.19~18.04.1
    • 5.0.0-1020.21~18.04.1
    • 5.0.0-1022.23~18.04.1
    • 5.0.0-1023.24~18.04.1
    • 5.0.0-1025.27~18.04.1
    • 5.0.0-1027.29~18.04.1
    • 5.0.0-1028.30~18.04.1
    • 5.0.0-1029.31~18.04.1
    • 5.0.0-1031.33
    • 5.0.0-1032.34
    • 5.0.0-1035.37
    • 5.0.0-1036.38
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure-5.3 Ubuntu:18.04:LTS

    Versions
    • 5.3.0-1007.8~18.04.1
    • 5.3.0-1008.9~18.04.1
    • 5.3.0-1009.10~18.04.1
    • 5.3.0-1010.11~18.04.1
    • 5.3.0-1012.13~18.04.1
    • 5.3.0-1013.14~18.04.1
    • 5.3.0-1016.17~18.04.1
    • 5.3.0-1018.19~18.04.1
    • 5.3.0-1019.20~18.04.1
    • 5.3.0-1020.21~18.04.1
    • 5.3.0-1022.23~18.04.1
    • 5.3.0-1028.29~18.04.1
    • 5.3.0-1031.32~18.04.1
    • 5.3.0-1032.33~18.04.1
    • 5.3.0-1034.35~18.04.1
    • 5.3.0-1035.36
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure-edge Ubuntu:18.04:LTS

    Versions
    • 4.18.0-1006.6~18.04.1
    • 4.18.0-1007.7~18.04.1
    • 4.18.0-1008.8~18.04.1
    • 5.0.0-1012.12~18.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gcp Ubuntu:18.04:LTS

    Versions
    • 4.15.0-1001.1
    • 4.15.0-1003.3
    • 4.15.0-1005.5
    • 4.15.0-1006.6
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1010.10
    • 4.15.0-1014.14
    • 4.15.0-1015.15
    • 4.15.0-1017.18
    • 4.15.0-1018.19
    • 4.15.0-1019.20
    • 4.15.0-1021.22
    • 4.15.0-1023.24
    • 4.15.0-1024.25
    • 4.15.0-1025.26
    • 4.15.0-1026.27
    • 4.15.0-1027.28
    • 4.15.0-1028.29
    • 4.15.0-1029.31
    • 4.15.0-1030.32
    • 4.15.0-1032.34
    • 4.15.0-1033.35
    • 4.15.0-1034.36
    • 4.15.0-1036.38
    • 4.15.0-1037.39
    • 4.15.0-1040.42
    • 4.15.0-1042.45
    • 4.15.0-1044.70
    • 5.0.0-1020.20~18.04.1
    • 5.0.0-1021.21~18.04.1
    • 5.0.0-1025.26~18.04.1
    • 5.0.0-1026.27~18.04.1
    • 5.0.0-1028.29~18.04.1
    • 5.0.0-1029.30~18.04.1
    • 5.0.0-1031.32
    • 5.0.0-1033.34
    • 5.0.0-1034.35
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gcp-5.3 Ubuntu:18.04:LTS

    Versions
    • 5.3.0-1008.9~18.04.1
    • 5.3.0-1009.10~18.04.1
    • 5.3.0-1010.11~18.04.1
    • 5.3.0-1012.13~18.04.1
    • 5.3.0-1014.15~18.04.1
    • 5.3.0-1016.17~18.04.1
    • 5.3.0-1017.18~18.04.1
    • 5.3.0-1018.19~18.04.1
    • 5.3.0-1020.22~18.04.1
    • 5.3.0-1026.28~18.04.1
    • 5.3.0-1029.31~18.04.1
    • 5.3.0-1030.32~18.04.1
    • 5.3.0-1032.34~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gke-4.15 Ubuntu:18.04:LTS

    Versions
    • 4.15.0-1030.32
    • 4.15.0-1032.34
    • 4.15.0-1033.35
    • 4.15.0-1034.36
    • 4.15.0-1036.38
    • 4.15.0-1037.39
    • 4.15.0-1040.42
    • 4.15.0-1041.43
    • 4.15.0-1042.44
    • 4.15.0-1044.46
    • 4.15.0-1045.48
    • 4.15.0-1046.49
    • 4.15.0-1048.51
    • 4.15.0-1049.52
    • 4.15.0-1050.53
    • 4.15.0-1052.55
    • 4.15.0-1055.58
    • 4.15.0-1057.60
    • 4.15.0-1058.61
    • 4.15.0-1059.62
    • 4.15.0-1063.66
    • 4.15.0-1064.67
    • 4.15.0-1066.69
    • 4.15.0-1067.70
    • 4.15.0-1069.72
    • 4.15.0-1070.73
    • 4.15.0-1072.76
    • 4.15.0-1073.78
    • 4.15.0-1074.79
    • 4.15.0-1076.81
    • 4.15.0-1077.82
    • 4.15.0-1078.83
    • 4.15.0-1079.84
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gke-5.4 Ubuntu:18.04:LTS

    Versions
    • 5.4.0-1025.25~18.04.1
    • 5.4.0-1027.28~18.04.1
    • 5.4.0-1029.31~18.04.1
    • 5.4.0-1030.32~18.04.1
    • 5.4.0-1032.34~18.04.1
    • 5.4.0-1033.35~18.04.1
    • 5.4.0-1035.37~18.04.1
    • 5.4.0-1036.38~18.04.1
    • 5.4.0-1037.39~18.04.1
    • 5.4.0-1039.41~18.04.1
    • 5.4.0-1040.42~18.04.1
    • 5.4.0-1042.44~18.04.1
    • 5.4.0-1043.45~18.04.1
    • 5.4.0-1044.46~18.04.1
    • 5.4.0-1046.48~18.04.1
    • 5.4.0-1049.52~18.04.1
    • 5.4.0-1051.54~18.04.1
    • 5.4.0-1052.55~18.04.1
    • 5.4.0-1053.56~18.04.1
    • 5.4.0-1054.57~18.04.1
    • 5.4.0-1055.58~18.04.1
    • 5.4.0-1056.59~18.04.1
    • 5.4.0-1057.60~18.04.1
    • 5.4.0-1059.62~18.04.1
    • 5.4.0-1061.64~18.04.1
    • 5.4.0-1062.65~18.04.1
    • 5.4.0-1063.66~18.04.1
    • 5.4.0-1065.68~18.04.1
    • 5.4.0-1066.69~18.04.1
    • 5.4.0-1067.70~18.04.1
    • 5.4.0-1068.71~18.04.1
    • 5.4.0-1071.76~18.04.3
    • 5.4.0-1072.77~18.04.1
    • 5.4.0-1074.79~18.04.1
    • 5.4.0-1076.82~18.04.1
    • 5.4.0-1078.84~18.04.1
    • 5.4.0-1080.86~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gkeop-5.4 Ubuntu:18.04:LTS

    Versions
    • 5.4.0-1001.1
    • 5.4.0-1003.3
    • 5.4.0-1004.5
    • 5.4.0-1005.6
    • 5.4.0-1007.8~18.04.1
    • 5.4.0-1008.9~18.04.1
    • 5.4.0-1009.10~18.04.1
    • 5.4.0-1010.11~18.04.1
    • 5.4.0-1011.12~18.04.2
    • 5.4.0-1012.13~18.04.1
    • 5.4.0-1013.14~18.04.1
    • 5.4.0-1014.15~18.04.1
    • 5.4.0-1015.16~18.04.1
    • 5.4.0-1016.17~18.04.1
    • 5.4.0-1018.19~18.04.1
    • 5.4.0-1021.22~18.04.1
    • 5.4.0-1022.23~18.04.1
    • 5.4.0-1023.24~18.04.1
    • 5.4.0-1024.25~18.04.1
    • 5.4.0-1025.26~18.04.1
    • 5.4.0-1026.27~18.04.1
    • 5.4.0-1027.28~18.04.1
    • 5.4.0-1029.30~18.04.2
    • 5.4.0-1031.32~18.04.1
    • 5.4.0-1032.33~18.04.1
    • 5.4.0-1033.34~18.04.1
    • 5.4.0-1034.35~18.04.1
    • 5.4.0-1036.37~18.04.1
    • 5.4.0-1037.38~18.04.1
    • 5.4.0-1038.39~18.04.1
    • 5.4.0-1039.40~18.04.1
    • 5.4.0-1040.41~18.04.1
    • 5.4.0-1043.44~18.04.1
    • 5.4.0-1046.48~18.04.1
    • 5.4.0-1048.51~18.04.1
    • 5.4.0-1049.52~18.04.1
    • 5.4.0-1051.54~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-hwe Ubuntu:18.04:LTS

    Versions
    • 4.18.0-13.14~18.04.1
    • 4.18.0-14.15~18.04.1
    • 4.18.0-15.16~18.04.1
    • 4.18.0-16.17~18.04.1
    • 4.18.0-17.18~18.04.1
    • 4.18.0-18.19~18.04.1
    • 4.18.0-20.21~18.04.1
    • 4.18.0-21.22~18.04.1
    • 4.18.0-22.23~18.04.1
    • 4.18.0-24.25~18.04.1
    • 4.18.0-25.26~18.04.1
    • 5.0.0-23.24~18.04.1
    • 5.0.0-25.26~18.04.1
    • 5.0.0-27.28~18.04.1
    • 5.0.0-29.31~18.04.1
    • 5.0.0-31.33~18.04.1
    • 5.0.0-32.34~18.04.2
    • 5.0.0-35.38~18.04.1
    • 5.0.0-36.39~18.04.1
    • 5.0.0-37.40~18.04.1
    • 5.3.0-26.28~18.04.1
    • 5.3.0-28.30~18.04.1
    • 5.3.0-40.32~18.04.1
    • 5.3.0-42.34~18.04.1
    • 5.3.0-45.37~18.04.1
    • 5.3.0-46.38~18.04.1
    • 5.3.0-51.44~18.04.2
    • 5.3.0-53.47~18.04.1
    • 5.3.0-59.53~18.04.1
    • 5.3.0-61.55~18.04.1
    • 5.3.0-62.56~18.04.1
    • 5.3.0-64.58~18.04.1
    • 5.3.0-65.59
    • 5.3.0-66.60
    • 5.3.0-67.61
    • 5.3.0-68.63
    • 5.3.0-69.65
    • 5.3.0-70.66
    • 5.3.0-72.68
    • 5.3.0-73.69
    • 5.3.0-74.70
    • 5.3.0-75.71
    • 5.3.0-76.72
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-hwe-edge Ubuntu:18.04:LTS

    Versions
    • 5.0.0-15.16~18.04.1
    • 5.0.0-16.17~18.04.1
    • 5.0.0-17.18~18.04.1
    • 5.0.0-19.20~18.04.1
    • 5.0.0-20.21~18.04.1
    • 5.3.0-19.20~18.04.2
    • 5.3.0-22.24~18.04.1
    • 5.3.0-23.25~18.04.1
    • 5.3.0-23.25~18.04.2
    • 5.3.0-24.26~18.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-oem Ubuntu:18.04:LTS

    Versions
    • 4.15.0-1002.3
    • 4.15.0-1004.5
    • 4.15.0-1006.9
    • 4.15.0-1008.11
    • 4.15.0-1009.12
    • 4.15.0-1012.15
    • 4.15.0-1013.16
    • 4.15.0-1015.18
    • 4.15.0-1017.20
    • 4.15.0-1018.21
    • 4.15.0-1021.24
    • 4.15.0-1024.29
    • 4.15.0-1026.31
    • 4.15.0-1028.33
    • 4.15.0-1030.35
    • 4.15.0-1033.38
    • 4.15.0-1034.39
    • 4.15.0-1035.40
    • 4.15.0-1036.41
    • 4.15.0-1038.43
    • 4.15.0-1039.44
    • 4.15.0-1043.48
    • 4.15.0-1045.50
    • 4.15.0-1050.57
    • 4.15.0-1056.65
    • 4.15.0-1057.66
    • 4.15.0-1059.68
    • 4.15.0-1063.72
    • 4.15.0-1064.73
    • 4.15.0-1065.75
    • 4.15.0-1066.76
    • 4.15.0-1067.77
    • 4.15.0-1069.79
    • 4.15.0-1073.83
    • 4.15.0-1076.86
    • 4.15.0-1079.89
    • 4.15.0-1080.90
    • 4.15.0-1081.91
    • 4.15.0-1087.97
    • 4.15.0-1090.100
    • 4.15.0-1091.101
    • 4.15.0-1093.103
    • 4.15.0-1094.104
    • 4.15.0-1096.106
    • 4.15.0-1097.107
    • 4.15.0-1099.109
    • 4.15.0-1100.110
    • 4.15.0-1101.112
    • 4.15.0-1102.113
    • 4.15.0-1103.114
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-oracle-5.0 Ubuntu:18.04:LTS

    Versions
    • 5.0.0-1007.12~18.04.1
    • 5.0.0-1008.13~18.04.1
    • 5.0.0-1009.14~18.04.1
    • 5.0.0-1010.15~18.04.1
    • 5.0.0-1011.16
    • 5.0.0-1013.18
    • 5.0.0-1014.19
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-oracle-5.3 Ubuntu:18.04:LTS

    Versions
    • 5.3.0-1011.12~18.04.1
    • 5.3.0-1013.14~18.04.1
    • 5.3.0-1014.15~18.04.1
    • 5.3.0-1016.18~18.04.1
    • 5.3.0-1018.20~18.04.1
    • 5.3.0-1024.26~18.04.1
    • 5.3.0-1027.29~18.04.1
    • 5.3.0-1028.30~18.04.1
    • 5.3.0-1030.32~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-aws-5.15 Ubuntu:20.04:LTS

    Versions
    • 5.15.0-1014.18~20.04.1
    • 5.15.0-1015.19~20.04.1
    • 5.15.0-1017.21~20.04.1
    • 5.15.0-1019.23~20.04.1
    • 5.15.0-1020.24~20.04.1
    • 5.15.0-1021.25~20.04.1
    • 5.15.0-1022.26~20.04.1
    Affected ranges
    • ECOSYSTEM: < 5.15.0-1023.27~20.04.1

    Update to 5.15.0-1023.27~20.04.1

  • linux-azure-5.15 Ubuntu:20.04:LTS

    Versions
    • 5.15.0-1007.8~20.04.1
    • 5.15.0-1008.9~20.04.1
    • 5.15.0-1013.16~20.04.1
    • 5.15.0-1014.17~20.04.1
    • 5.15.0-1017.20~20.04.1
    • 5.15.0-1019.24~20.04.1
    • 5.15.0-1020.25~20.04.1
    • 5.15.0-1021.26~20.04.1
    • 5.15.0-1022.27~20.04.1
    Affected ranges
    • ECOSYSTEM: < 5.15.0-1023.29~20.04.1

    Update to 5.15.0-1023.29~20.04.1

  • linux-gcp-5.15 Ubuntu:20.04:LTS

    Versions
    • 5.15.0-1006.9~20.04.1
    • 5.15.0-1012.17~20.04.1
    • 5.15.0-1013.18~20.04.1
    • 5.15.0-1016.21~20.04.1
    • 5.15.0-1017.23~20.04.2
    • 5.15.0-1018.24~20.04.1
    • 5.15.0-1021.28~20.04.1
    Affected ranges
    • ECOSYSTEM: < 5.15.0-1022.29~20.04.1

    Update to 5.15.0-1022.29~20.04.1

Original sources

Check your server →