Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2022-49840: Linux kernel can crash on odd-sized BPF test runs
CVE-2022-49840 · published 1 year ago
Summary
The Linux kernel code that runs BPF network tests can read invalid memory when the test data size is an odd number, causing a crash on systems with memory safety checks enabled. This affects standard Linux kernel and the Canonical Linux builds for Azure, AWS, GCP, and hardware enablement releases. Update to the latest kernel version that includes the fix to prevent the crash.
What to do
- Update canonical linux-azure to version 4.15.0-1162.177~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1151.164~16.04.1.
- Update canonical linux-azure to version 4.15.0-1162.177~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1146.162~16.04.1.
- Update canonical linux-hwe to version 4.15.0-206.217~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1115.126~16.04.1.
- Update canonical linux to version 4.15.0-206.217.
- Update canonical linux-aws to version 4.15.0-1151.164.
- Update canonical linux-aws-5.4 to version 5.4.0-1097.105~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1162.177.
- Update canonical linux-azure-5.4 to version 5.4.0-1104.110~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1146.162.
- Update canonical linux-gcp-5.4 to version 5.4.0-1101.110~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-144.161~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1045.50~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1136.141.
- Update canonical linux-oracle to version 4.15.0-1115.126.
- Update canonical linux-oracle-5.4 to version 5.4.0-1094.103~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1081.92~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2090.96.
- Update canonical linux-azure-fips to version 4.15.0-2071.77.
- Update canonical linux-fips to version 4.15.0-1108.119.
- Update canonical linux-gcp-fips to version 4.15.0-2055.60.
- Update canonical linux to version 5.4.0-144.161.
- Update canonical linux-aws to version 5.4.0-1097.105.
- Update canonical linux-aws-5.15 to version 5.15.0-1031.35~20.04.1.
- Update canonical linux-azure to version 5.4.0-1104.110.
- Update canonical linux-azure-5.15 to version 5.15.0-1034.41~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1059.65.
- Update canonical linux-gcp to version 5.4.0-1101.110.
- Update canonical linux-gcp-5.15 to version 5.15.0-1030.37~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1045.50.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1026.31~20.04.1.
- Update canonical linux-iot to version 5.4.0-1013.15.
- Update canonical linux-kvm to version 5.4.0-1087.93.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1094.103.
- Update canonical linux-oracle-5.15 to version 5.15.0-1030.36~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1081.92.
- Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1022.26.
- Update canonical linux-aws-fips to version 5.4.0-1099.107+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1104.110+fips1.
- Update canonical linux-fips to version 5.4.0-1073.82.
- Update canonical linux-gcp-fips to version 5.4.0-1101.110+fips1.
- Update canonical linux to version 5.15.0-67.74.
- Update canonical linux-aws to version 5.15.0-1031.35.
- Update canonical linux-azure to version 5.15.0-1034.41.
- Update canonical linux-gcp to version 5.15.0-1030.37.
- Update canonical linux-gke to version 5.15.0-1028.33.
- Update canonical linux-gkeop to version 5.15.0-1016.21.
- Update canonical linux-ibm to version 5.15.0-1026.29.
- Update canonical linux-intel-iotg to version 5.15.0-1026.31.
- Update canonical linux-kvm to version 5.15.0-1029.34.
- Update canonical linux-lowlatency to version 5.15.0-67.74.
- Update canonical linux-nvidia to version 5.15.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1030.36.
- Update canonical linux-raspi to version 5.15.0-1025.27.
- Update canonical linux-bluefield to version 5.15.0-1014.16.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1022.27.
- Update canonical linux-realtime to version 5.15.0-1033.36.
- Update canonical linux-azure-fde to version 5.15.0-1034.41.1.
- Update debian linux to version 6.0.10-1.
- Update linux kernel to version 6.0.10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 4.12, < 4.14.300 >= 4.15, < 4.19.267 >= 4.20, < 5.4.225 >= 5.5, < 5.10.156 >= 5.11, < 5.15.80 >= 5.16, < 6.0.10 6.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1162.177~14.04.1 Fix: upgrade to 4.15.0-1162.177~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1151.164~16.04.1 Fix: upgrade to 4.15.0-1151.164~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1162.177~16.04.1 Fix: upgrade to 4.15.0-1162.177~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1146.162~16.04.1 Fix: upgrade to 4.15.0-1146.162~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-206.217~16.04.1 Fix: upgrade to 4.15.0-206.217~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1115.126~16.04.1 Fix: upgrade to 4.15.0-1115.126~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-206.217 Fix: upgrade to 4.15.0-206.217
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1151.164 Fix: upgrade to 4.15.0-1151.164
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1097.105~18.04.1 Fix: upgrade to 5.4.0-1097.105~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1162.177 Fix: upgrade to 4.15.0-1162.177
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1104.110~18.04.1 Fix: upgrade to 5.4.0-1104.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1146.162 Fix: upgrade to 4.15.0-1146.162
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1101.110~18.04.1 Fix: upgrade to 5.4.0-1101.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-144.161~18.04.1 Fix: upgrade to 5.4.0-144.161~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1045.50~18.04.1 Fix: upgrade to 5.4.0-1045.50~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1136.141 Fix: upgrade to 4.15.0-1136.141
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1115.126 Fix: upgrade to 4.15.0-1115.126
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1094.103~18.04.1 Fix: upgrade to 5.4.0-1094.103~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1081.92~18.04.1 Fix: upgrade to 5.4.0-1081.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2090.96 Fix: upgrade to 4.15.0-2090.96
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2071.77 Fix: upgrade to 4.15.0-2071.77
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1108.119 Fix: upgrade to 4.15.0-1108.119
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2055.60 Fix: upgrade to 4.15.0-2055.60
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-144.161 Fix: upgrade to 5.4.0-144.161
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1097.105 Fix: upgrade to 5.4.0-1097.105
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1031.35~20.04.1 Fix: upgrade to 5.15.0-1031.35~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1104.110 Fix: upgrade to 5.4.0-1104.110
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1034.41~20.04.1 Fix: upgrade to 5.15.0-1034.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1059.65 Fix: upgrade to 5.4.0-1059.65
|
Showing 50 of 147. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1101.110 Fix: upgrade to 5.4.0-1101.110
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1030.37~20.04.1 Fix: upgrade to 5.15.0-1030.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1045.50 Fix: upgrade to 5.4.0-1045.50
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1026.31~20.04.1 Fix: upgrade to 5.15.0-1026.31~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1013.15 Fix: upgrade to 5.4.0-1013.15
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1087.93 Fix: upgrade to 5.4.0-1087.93
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1014.14~20.04.1 Fix: upgrade to 5.15.0-1014.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1094.103 Fix: upgrade to 5.4.0-1094.103
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1030.36~20.04.1 Fix: upgrade to 5.15.0-1030.36~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1081.92 Fix: upgrade to 5.4.0-1081.92
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1030.34~20.04.1 Fix: upgrade to 5.15.0-1030.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1022.26 Fix: upgrade to 5.4.0-1022.26
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1099.107+fips1 Fix: upgrade to 5.4.0-1099.107+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1104.110+fips1 Fix: upgrade to 5.4.0-1104.110+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1073.82 Fix: upgrade to 5.4.0-1073.82
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1101.110+fips1 Fix: upgrade to 5.4.0-1101.110+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1031.35 Fix: upgrade to 5.15.0-1031.35
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1034.41 Fix: upgrade to 5.15.0-1034.41
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1030.37 Fix: upgrade to 5.15.0-1030.37
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1028.33 Fix: upgrade to 5.15.0-1028.33
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1016.21 Fix: upgrade to 5.15.0-1016.21
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1026.29 Fix: upgrade to 5.15.0-1026.29
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1026.31 Fix: upgrade to 5.15.0-1026.31
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1029.34 Fix: upgrade to 5.15.0-1029.34
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1023.23 Fix: upgrade to 5.15.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1030.36 Fix: upgrade to 5.15.0-1030.36
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1025.27 Fix: upgrade to 5.15.0-1025.27
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1014.16 Fix: upgrade to 5.15.0-1014.16
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1022.27 Fix: upgrade to 5.15.0-1022.27
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1033.36 Fix: upgrade to 5.15.0-1033.36
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1034.41.1 Fix: upgrade to 5.15.0-1034.41.1
|
| Debian:12 | debian | linux |
< 6.0.10-1 Fix: upgrade to 6.0.10-1
|
| Linux | linux | kernel |
>= 5.16.0, < 6.0.10 Fix: upgrade to 6.0.10
|
Original advisory text
bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the struct skb_shared_info's unaligned access. As seen below: BUG: KFENCE: use-after-free read in __skb_clone+0x23c/0x2a0 net/core/skbuff.c:1032 Use-after-free read at 0xffff6254fffac077 (in kfence-#213): __lse_atomic_add arch/arm64/include/asm/atomic_lse.h:26 [inline] arch_atomic_add arch/arm64/include/asm/atomic.h:28 [inline] arch_atomic_inc include/linux/atomic-arch-fallback.h:270 [inline] atomic_inc include/asm-generic/atomic-instrumented.h:241 [inline] __skb_clone+0x23c/0x2a0 net/core/skbuff.c:1032 skb_clone+0xf4/0x214 net/core/skbuff.c:1481 ____bpf_clone_redirect net/core/filter.c:2433 [inline] bpf_clone_redirect+0x78/0x1c0 net/core/filter.c:2420 bpf_prog_d3839dd9068ceb51+0x80/0x330 bpf_dispatcher_nop_func include/linux/bpf.h:728 [inline] bpf_test_run+0x3c0/0x6c0 net/bpf/test_run.c:53 bpf_prog_test_run_skb+0x638/0xa7c net/bpf/test_run.c:594 bpf_prog_test_run kernel/bpf/syscall.c:3148 [inline] __do_sys_bpf kernel/bpf/syscall.c:4441 [inline] __se_sys_bpf+0xad0/0x1634 kernel/bpf/syscall.c:4381 kfence-#213: 0xffff6254fffac000-0xffff6254fffac196, size=407, cache=kmalloc-512 allocated by task 15074 on cpu 0 at 1342.585390s: kmalloc include/linux/slab.h:568 [inline] kzalloc include/linux/slab.h:675 [inline] bpf_test_init.isra.0+0xac/0x290 net/bpf/test_run.c:191 bpf_prog_test_run_skb+0x11c/0xa7c net/bpf/test_run.c:512 bpf_prog_test_run kernel/bpf/syscall.c:3148 [inline] __do_sys_bpf kernel/bpf/syscall.c:4441 [inline] __se_sys_bpf+0xad0/0x1634 kernel/bpf/syscall.c:4381 __arm64_sys_bpf+0x50/0x60 kernel/bpf/syscall.c:4381 To fix the problem, we adjust @size so that (@size + @hearoom) is a multiple of SMP_CACHE_BYTES. So we make sure the struct skb_shared_info is aligned to a cache line.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49840... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49840 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2022-49840 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49840 Third Party Advisory
- https://git.kernel.org/linus/d3fd203f36d46aa29600a72d57a1b61af80e4a25 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49840 Vendor Advisory
- https://git.kernel.org/stable/c/047824a730699c6c66df43306b80f700c9dfc2fd Third Party Advisory
- https://git.kernel.org/stable/c/1b597f2d6a55e9f549989913860ad5170da04964 Third Party Advisory
- https://git.kernel.org/stable/c/730fb1ef974a13915bc7651364d8b3318891cd70 Third Party Advisory
- https://git.kernel.org/stable/c/7a704dbfd3735304e261f2787c52fbc7c3884736 Third Party Advisory
- https://git.kernel.org/stable/c/d3fd203f36d46aa29600a72d57a1b61af80e4a25 Third Party Advisory
- https://git.kernel.org/stable/c/e60f37a1d379c821c17b08f366412dce9ef3d99f Third Party Advisory
- https://git.kernel.org/stable/c/eaa8edd86514afac9deb9bf9a5053e74f37edf40 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
6.8
Medium
Type
CWE-416Use After Free
Timeline
Published1 May 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49840 · NVD
CVE-2022-49840 · OSV
UBUNTU-CVE-2022-49840 · OSV
DEBIAN-CVE-2022-49840 · OSV
Track software like this
Free during beta