{
  "cveId": "CVE-2022-50436",
  "url": "https://patchblox.com/security/cve/CVE-2022-50436",
  "summary": "CVE-2022-50436 is fixed in 47 products on 1 platform, first by RHSA-2023:2458, released May 9, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* use-after...",
  "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)\n\n* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)\n\n* cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)\n\n* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)\n\n* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)\n\n* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)\n\n* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)\n\n* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)\n\n* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)\n\n* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)\n\n* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)\n\n* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)\n\n* memory leak in ipv6_renew_options() (CVE-2022-3524)\n\n* data races around icsk-\u003Eicsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)\n\n* data races around sk-\u003Esk_prot (CVE-2022-3567)\n\n* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)\n\n* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)\n\n* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)\n\n* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)\n\n* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)\n\n* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)\n\n* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)\n\n* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)\n\n* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)\n\n* lockdown bypass using IMA (CVE-2022-21505)\n\n* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)\n\n* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)\n\n* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)\n\n* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)\n\n* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)\n\n* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)\n\n* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)\n\n* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)\n\n* Denial of service in beacon protection for P2P-device (CVE-2022-42722)\n\n* memory corruption in usbmon driver (CVE-2022-43750)\n\n* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)\n\n* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)\n\n* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)\n\n* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)\n\n* denial of service in tipc_conn_close (CVE-2023-1382)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.",
  "published": "2023-05-09T00:00:00Z",
  "severity": "Important",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00103,
  "epssPercentile": 0.01004,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 9",
      "fixedVersion": "0:7.0.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-uki-virt",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uki-virt",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50436",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50436",
      "released": "2025-10-01T12:15:35Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50436",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50436",
      "released": "2025-10-01T12:15:35Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50436",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50436",
      "released": "2025-10-01T12:15:35Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rtla",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}