CVE-2022-49552

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel has been identified, related to the combination of JIT blinding and pointers to BPF subprogs. This issue causes a page fault when the kernel attempts to access an invalid address, resulting in a supervisor instruction fetch in kernel mode. The problem arises from the JIT blinding logic failing to recognize special instructions, specifically ld imm64 with an address of a BPF subprogram, and randomizing it. This leads to the second JIT phase missing the adjustment of the special ld imm64 instruction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.