MEDIUM
Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free
Published Oct 17, 2022
5.1
MEDIUMCVSS 4.0
EPSS 0.91%
Description
A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.
Affected products
-
- Version 5.10.162StatusaffectedConstraints-
- Version 5.15.0StatusaffectedConstraints-
- Version 5.15.1StatusaffectedConstraints-
- Version 5.15.10StatusaffectedConstraints-
- Version 5.15.11StatusaffectedConstraints-
- Version 5.15.12StatusaffectedConstraints-
- Version 5.15.13StatusaffectedConstraints-
- Version 5.15.14StatusaffectedConstraints-
- Version 5.15.15StatusaffectedConstraints-
- Version 5.15.16StatusaffectedConstraints-
- Version 5.15.17StatusaffectedConstraints-
- Version 5.15.18StatusaffectedConstraints-
- Version 5.15.19StatusaffectedConstraints-
- Version 5.15.2StatusaffectedConstraints-
- Version 5.15.20StatusaffectedConstraints-
- Version 5.15.21StatusaffectedConstraints-
- Version 5.15.22StatusaffectedConstraints-
- Version 5.15.23StatusaffectedConstraints-
- Version 5.15.24StatusaffectedConstraints-
- Version 5.15.25StatusaffectedConstraints-
- Version 5.15.26StatusaffectedConstraints-
- Version 5.15.27StatusaffectedConstraints-
- Version 5.15.28StatusaffectedConstraints-
- Version 5.15.29StatusaffectedConstraints-
- Version 5.15.3StatusaffectedConstraints-
- Version 5.15.30StatusaffectedConstraints-
- Version 5.15.31StatusaffectedConstraints-
- Version 5.15.32StatusaffectedConstraints-
- Version 5.15.33StatusaffectedConstraints-
- Version 5.15.34StatusaffectedConstraints-
- Version 5.15.35StatusaffectedConstraints-
- Version 5.15.36StatusaffectedConstraints-
- Version 5.15.37StatusaffectedConstraints-
- Version 5.15.38StatusaffectedConstraints-
- Version 5.15.39StatusaffectedConstraints-
- Version 5.15.4StatusaffectedConstraints-
- Version 5.15.40StatusaffectedConstraints-
- Version 5.15.41StatusaffectedConstraints-
- Version 5.15.42StatusaffectedConstraints-
- Version 5.15.43StatusaffectedConstraints-
- Version 5.15.44StatusaffectedConstraints-
- Version 5.15.45StatusaffectedConstraints-
- Version 5.15.46StatusaffectedConstraints-
- Version 5.15.47StatusaffectedConstraints-
- Version 5.15.48StatusaffectedConstraints-
- Version 5.15.49StatusaffectedConstraints-
- Version 5.15.5StatusaffectedConstraints-
- Version 5.15.50StatusaffectedConstraints-
- Version 5.15.51StatusaffectedConstraints-
- Version 5.15.52StatusaffectedConstraints-
- Version 5.15.53StatusaffectedConstraints-
- Version 5.15.54StatusaffectedConstraints-
- Version 5.15.55StatusaffectedConstraints-
- Version 5.15.56StatusaffectedConstraints-
- Version 5.15.57StatusaffectedConstraints-
- Version 5.15.58StatusaffectedConstraints-
- Version 5.15.59StatusaffectedConstraints-
- Version 5.15.6StatusaffectedConstraints-
- Version 5.15.60StatusaffectedConstraints-
- Version 5.15.61StatusaffectedConstraints-
- Version 5.15.62StatusaffectedConstraints-
- Version 5.15.63StatusaffectedConstraints-
- Version 5.15.64StatusaffectedConstraints-
- Version 5.15.65StatusaffectedConstraints-
- Version 5.15.66StatusaffectedConstraints-
- Version 5.15.67StatusaffectedConstraints-
- Version 5.15.68StatusaffectedConstraints-
- Version 5.15.69StatusaffectedConstraints-
- Version 5.15.7StatusaffectedConstraints-
- Version 5.15.70StatusaffectedConstraints-
- Version 5.15.71StatusaffectedConstraints-
- Version 5.15.72StatusaffectedConstraints-
- Version 5.15.73StatusaffectedConstraints-
- Version 5.15.74StatusaffectedConstraints-
- Version 5.15.75StatusaffectedConstraints-
- Version 5.15.76StatusaffectedConstraints-
- Version 5.15.77StatusaffectedConstraints-
- Version 5.15.78StatusaffectedConstraints-
- Version 5.15.79StatusaffectedConstraints-
- Version 5.15.8StatusaffectedConstraints-
- Version 5.15.80StatusaffectedConstraints-
- Version 5.15.81StatusaffectedConstraints-
- Version 5.15.82StatusaffectedConstraints-
- Version 5.15.83StatusaffectedConstraints-
- Version 5.15.84StatusaffectedConstraints-
- Version 5.15.85StatusaffectedConstraints-
- Version 5.15.9StatusaffectedConstraints-
- Version 6.0.0StatusaffectedConstraints-
- Version 6.0.1StatusaffectedConstraints-
- Version 6.0.10StatusaffectedConstraints-
- Version 6.0.11StatusaffectedConstraints-
- Version 6.0.12StatusaffectedConstraints-
- Version 6.0.13StatusaffectedConstraints-
- Version 6.0.14StatusaffectedConstraints-
- Version 6.0.15StatusaffectedConstraints-
- Version 6.0.2StatusaffectedConstraints-
- Version 6.0.3StatusaffectedConstraints-
- Version 6.0.4StatusaffectedConstraints-
- Version 6.0.5StatusaffectedConstraints-
- Version 6.0.6StatusaffectedConstraints-
- Version 6.0.7StatusaffectedConstraints-
- Version 6.0.8StatusaffectedConstraints-
- Version 6.0.9StatusaffectedConstraints-
- Version 6.1.0StatusaffectedConstraints-
- Version 6.1.1StatusaffectedConstraints-
- Version 5.10.163StatusunaffectedConstraints-
- Version 5.15.86StatusunaffectedConstraints-
- Version 6.0.16StatusunaffectedConstraints-
- Version 6.1.2StatusunaffectedConstraints-
- Version 6.2StatusunaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Kernel | n/a |
|
OR
- 11.0
- ≥ 5.10 · < 5.10.163
- ≥ 5.11 · < 5.15.86
- ≥ 5.16 · < 6.0.16
- ≥ 6.1 · < 6.1.2
No data.
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Fix deferred
Red Hat Enterprise Linux 8
kernel-rt
Fix deferred
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
Red Hat mitigation
The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space. For the Red Hat Enterprise Linux 8 to confirm the current state, inspect the sysctl with the command: # cat /proc/sys/kernel/unprivileged_bpf_disabled The setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw.
Weaknesses (2)
References (12)
- https://access.redhat.com/security/cve/CVE-2022-3534 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2165706 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42900 Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93c660ca40b5d2f7c1b1626e955a8e9fa30e0749 patchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2025/04/msg00033.html Mailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3534
- https://vuldb.com/?id.211032 Permissions RequiredThird Party Advisory
- https://vuldb.com/cve/CVE-2022-3534 third-party-advisoryThird Party AdvisoryVDB Entry
- https://vuldb.com/vuln/211032 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/vuln/211032/cti signaturepermissions-requiredThird Party AdvisoryVDB Entry
- https://www.cve.org/CVERecord?id=CVE-2022-3534
- https://www.kernel.org/ product
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2022-3534 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2165706 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42900 | Advisory | |
| https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93c660ca40b5d2f7c1b1626e955a8e9fa30e0749 | patchVendor Advisory | |
| https://lists.debian.org/debian-lts-announce/2025/04/msg00033.html | Mailing ListThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2022-3534 | ||
| https://vuldb.com/?id.211032 | Permissions RequiredThird Party Advisory | |
| https://vuldb.com/cve/CVE-2022-3534 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://vuldb.com/vuln/211032 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/vuln/211032/cti | signaturepermissions-requiredThird Party AdvisoryVDB Entry | |
| https://www.cve.org/CVERecord?id=CVE-2022-3534 | ||
| https://www.kernel.org/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Oct 17, 2022
Updated Jul 28, 2026
Reserved Oct 17, 2022
Link CVE-2022-3534
CISA Vulnrichment
Updated Apr 14, 2025
ENISA EUVD
EUVD-2022-42900 Assigner VulDB
Published Oct 17, 2022
Updated Jul 28, 2026
Exploited since n/a
Link EUVD-2022-42900