Medium severity5.5NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026

CVE-2022-0433

Description

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=5.16
- (no CPE)
- (no CPE)range: <5.17-rc1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/nvdMailing ListPatchThird Party Advisory
lore.kernel.org/bpf/1640776802-22421-1-git-send-email-tcs.kernel%40gmail.com/t/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000