CVE-2022-0433

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc1

Description The issue is related to a NULL pointer dereference flaw in the Linux kernel's BPF subsystem, specifically in the way a user triggers the map get next key function of the BPF bloom filter. This flaw allows a local user to crash the system.

Recommendations For Linux kernel versions prior to 5.17-rc1, update to version 5.17-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the BPF subsystem to minimize the risk of exploitation.