CVE-2022-49967

bpf: Fix a data-race around bpf_jit_limit.

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 23, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a data-race around bpf_jit_limit.

While reading bpf_jit_limit, it can be changed concurrently via sysctl, WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit is long, so we need to add a paired READ_ONCE() to avoid load-tearing.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 to before ba632ad0bacb13197a8f38e7526448974e87f292Affected ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 to before 0947ae1121083d363d522ff7518ee72b55bd8d29Affected c98446e1bab6253ddce7144cc2a91c400a323839Affected a1fe647042affe713a17243cd10e9b25f3d83948Affected 43caa29c99db5a41b204e8ced01b00e151335ca8Affected 4.9.190 to before 4.10Affected 4.14.140 to before 4.15Affected 4.19.47 to before 4.20Affected
LinuxLinux	4.20Affected before 4.20Not affected 5.19.8 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 to before ba632ad0bacb13197a8f38e7526448974e87f292Affected
ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 to before 0947ae1121083d363d522ff7518ee72b55bd8d29Affected
c98446e1bab6253ddce7144cc2a91c400a323839Affected
a1fe647042affe713a17243cd10e9b25f3d83948Affected
43caa29c99db5a41b204e8ced01b00e151335ca8Affected
4.9.190 to before 4.10Affected
4.14.140 to before 4.15Affected
4.19.47 to before 4.20Affected

LinuxLinux

4.20Affected
before 4.20Not affected
5.19.8 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.