CVE-2022-48770: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can return NULL on powerpc for kernel threads. This is then used in __bpf_get_stack() to check for user mode, resulting in a kernel oops. Guard against this by checking return value of task_pt_regs() before trying to obtain the call chain.

Affected products

• Linux Linux Kernel: from 5.9, before 5.10.96 (fixed in 5.10.96); from 5.11, before 5.15.19 (fixed in 5.15.19); from 5.16, before 5.16.5 (fixed in 5.16.5); version 5.17 only

Published 2024-06-20. Last modified 2026-06-17.