CVE-2022-2905
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map.
Published Sep 9, 2022 · updated Oct 14, 2026 · linux linux kernel
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
Timeline
Detection, updates, and resolution for this record.
Sep 9, 2022 · NIST NVD
Detected
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
Oct 14, 2026 · NIST NVD
Updated
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
Affected
- cpe debian/debian linux10.0
- cpe linux/linux kernelversion unspecified
- cpe linux/linux kernel6.0
- cpe redhat/enterprise linux8.0
Sources
- CVE.orgCVE-2022-2905
Official CVE identifier
cve.org - NIST NVDCVE-2022-2905
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
nvd.nist.gov