CVE-2022-0264

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v5.16-rc6

Description A flaw in the Linux kernel's eBPF verifier allows internal memory locations to be returned to userspace when handling internal data structures. This can be exploited by a local attacker with permissions to insert eBPF code into the kernel, potentially leaking internal kernel memory details and defeating some kernel exploit mitigations.

Recommendations For Linux kernel versions prior to v5.16-rc6, update to version v5.16-rc6 or later to resolve the issue. As a temporary workaround, consider restricting the insertion of eBPF code to the kernel to minimize the risk of exploitation.