CVE-2022-0433CWE-908

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter

published March 9, 2022

CVSS
—
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2022-03-09T16:32Z
EPSS history
Timeline
  • 09 MAR 16:32Z
    A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter
    cvelistv5