Skip to content

In the Linux kernel, the following vulnerability has been...

Unreviewed Published Jun 18, 2025 to the GitHub Advisory Database • Updated Jun 18, 2025

Package

No package listedSuggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix potential 32-bit overflow when accessing ARRAY map element

If BPF array map is bigger than 4GB, element pointer calculation can
overflow because both index and elem_size are u32. Fix this everywhere
by forcing 64-bit multiplication. Extract this formula into separate
small helper and use it consistently in various places.

Speculative-preventing formula utilizing index_mask trick is left as is,
but explicit u64 casts are added in both places.

References

Published by the National Vulnerability Database Jun 18, 2025
Published to the GitHub Advisory Database Jun 18, 2025
Last updated Jun 18, 2025

Severity

Unknown

EPSS score

Weaknesses

No CWEs

CVE ID

CVE-2022-50167

GHSA ID

GHSA-mrhw-xcq4-7jw7

Source code

No known source code

Dependabot alerts are not supported on this advisory because it does not have a package from a supported ecosystem with an affected and fixed version.

Learn more about GitHub language support

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.