Vulnerability in Kernel: bpf, sockmap

Kernel Updated 02 Oct 2025

Summary

24/04/2022

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2022-1001832: bpf, sockmap: Fix more uncharged while msg has more_data. Affects Kernel versions >= 604326b41a6fb9b4a78b6179335decee0365cd8c, < 168ff181f5b6e7fce684c98a30d35da1dbf8f82a. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The bpf (Berkeley Packet Filter) subsystem within the Kernel allows for efficient packet filtering and processing. The sockmap feature, built on top of bpf, enables socket redirection and manipulation. This vulnerability affects the bpf and sockmap components of the Kernel.

Vulnerability Detail

The vulnerability in bpf and sockmap arises from an issue where resources are not properly accounted for when a message has the 'more_data' flag set. This can lead to resource exhaustion and potential denial-of-service attacks. An attacker could exploit this vulnerability by sending specially crafted messages to a system with the affected Kernel version. Successful exploitation could result in system instability or unresponsiveness.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.33 or later. This fix is available in commit 168ff181f5b6e7fce684c98a30d35da1dbf8f82a. Users can obtain the updated Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

No specific workaround has been provided for this vulnerability.

Conclusion

The vulnerability in bpf and sockmap in the Kernel can lead to resource exhaustion and potential denial-of-service attacks. It is crucial to update the Linux Kernel to version v5.15.33 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →

FAQ

What is the impact of this vulnerability?

The vulnerability can lead to resource exhaustion and potential denial-of-service attacks. It may cause system instability or unresponsiveness.

How can I check if my system is affected?

You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.