CVE-2022-23222
HIGH 7.8EPSS 1.9%
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 1.92% chance of exploitation in the next 30 days, 80th percentile
- Published
- 2022-01-14
- Updated
- 2024-08-03
Proof-of-concept exploits (7)
- 0xsmirk/vehicle-kernel-exploit2★ · 2024-02-29
- FridayOrtiz/CVE-2022-232221★ · 2022-08-30
- PenteraIO/CVE-2022-23222-POC6★ · 2022-06-23
- smile-e3/vehicle-kernel-exploit2★ · 2024-02-29
- tr3ee/CVE-2022-23222571★ · 2022-06-07
- Al1ex/LinuxEelvation412★ · 2022-07-29
- peiwithhao/Hacker-University-of-peiwithhao4★ · 2025-11-04
Exploit collections (1)
- linux/kernelctf/CVE-2022-23222_cosgoogle/security-research
Security advisories
- http://www.openwall.com/lists/oss-security/2022/01/14/1
- http://www.openwall.com/lists/oss-security/2022/01/18/2
- http://www.openwall.com/lists/oss-security/2022/06/01/1
- http://www.openwall.com/lists/oss-security/2022/06/04/3
- http://www.openwall.com/lists/oss-security/2022/06/07/3
- https://security.netapp.com/advisory/ntap-20220217-0002
- https://www.debian.org/security/2022/dsa-5050
- https://www.openwall.com/lists/oss-security/2022/01/13/1