CVE-2022-50490
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
04/10/2025
Last modified:
27/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf: Propagate error from htab_lock_bucket() to userspace<br />
<br />
In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns<br />
-EBUSY, it will go to next bucket. Going to next bucket may not only<br />
skip the elements in current bucket silently, but also incur<br />
out-of-bound memory access or expose kernel memory to userspace if<br />
current bucket_cnt is greater than bucket_size or zero.<br />
<br />
Fixing it by stopping batch operation and returning -EBUSY when<br />
htab_lock_bucket() fails, and the application can retry or skip the busy<br />
batch as needed.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.75 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.19.17 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.0 (including) | 6.0.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page