{"schema_version":"1.9.0","id":"PUB-A-215814262","published":"2022-06-01T00:00:00Z","modified":"2026-09-10T15:43:18.983809180Z","aliases":["A-215814262","CVE-2022-23222"],"details":"In  kernel/bpf/verifier.c , there is a possible way to manipulate pointer arithmetic  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"],"severity":"Moderate","spl":"2022-06-05","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["18768621085448646307001774199887104283","93374316942925291244273634967322974642","161590431358123676568935454992550880906","92148593491386859782013470932680897551","123659105662047396412296602146039075125","195818613178541754245504552110243103958","43450431872990335751792943591283670313","106987073898418360256637578858320473377","183347015836270441868035023872223045084","212073938337863780447978151052667766045","309670263801451798605381809681899651599","247614672319011049154811586334740522044","237473971868900634033954528060497004504"],"threshold":0.9},"id":"PUB-A-215814262-4090b204","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","target":{"file":"kernel/bpf/verifier.c"}},{"deprecated":false,"digest":{"function_hash":"322483173983893910112606866589989019594","length":4756},"id":"PUB-A-215814262-cb31468c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","target":{"file":"kernel/bpf/verifier.c","function":"adjust_ptr_min_max_vals"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-215814262.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"}]}