CVE-2022-50167

bpf: fix potential 32-bit overflow when accessing ARRAY map element

References

Notes

 carnil> Introduced in c85d69135a91 ("bpf: move memory size checks to
 carnil> bpf_map_charge_init()"). Vulnerable versions: 5.3.

Bugs

Status

Branch Status
upstream released (6.0-rc1) [87ac0d600943994444e24382a87aa19acc4cd3d4]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.15-upstream-stable N/A "Fixed before branching point"
6.14-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.6-upstream-stable N/A "Fixed before branching point"
6.1-upstream-stable N/A "Fixed before branching point"
5.10-upstream-stable needed
sid released (5.19.6-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security N/A "Fixed before branching point"
5.10-bullseye-security needed