CVE-2022-49548

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential array overflow issue has been identified in the Linux kernel, specifically in the bpf trampoline get progs() function. The issue arises when the number of attached BPF TRAMP MODIFY RETURN bpf programs in a trampoline exceeds BPF MAX TRAMP PROGS, causing an array overflow due to the assignment '*progs++ = aux->prog'. This occurs because the 'cnt >= BPF MAX TRAMP PROGS' check does not account for BPF TRAMP MODIFY RETURN bpf programs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.