Skip to content

kernel CVE-2022-3534

High
rpkelly published GHSA-47wc-f242-gvmj Mar 21, 2023

Package

kernel-5.15 (bottlerocket)

Affected versions

< 1.13.0

Patched versions

1.13.0

Description

A use-after-free flaw was found in btf_dump_name_dups in tools/lib/bpf/btf_dump.c in libbpf in the Linux kernel. This issue occurs because the key stored in the hash table name_map is a string address, and the string memory is allocated by realloc() function. When the memory is resized by realloc() later, the old memory may be freed.

Severity

High

CVE ID

CVE-2022-3534

Weaknesses

No CWEs