CVE-2022-2785
mediumpriority · track · 22EPSS 0.003 · 18 %ileEURUUSEPSS · scored 2026-10-27
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-2785/cnnvd
- https://git.kernel.org/bpf/bpf/Patchcnnvd
- https://git.kernel.org/bpf/bpf/c/86f44fcec22ccnnvd
- https://lore.kernel.org/bpf/20220816205517.682470-1-zhuyifei@google.com/T/#tcnnvd
- https://git.kernel.org/bpf/bpf/c/86f44fcec22cenisa_euvd
- https://lore.kernel.org/bpf/20220816205517.682470-1-zhuyifei%40google.com/T/#tenisa_euvd
- https://git.kernel.org/bpf/bpf/c/86f44fcec22cPatchVendor Advisorynvd
- https://lore.kernel.org/bpf/20220816205517.682470-1-zhuyifei%40google.com/T/#tVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan