{"id":"PUB-A-215814262","details":"In  kernel/bpf/verifier.c , there is a possible way to manipulate pointer arithmetic  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-215814262","CVE-2022-23222"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"],"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","deprecated":false,"target":{"file":"kernel/bpf/verifier.c"},"digest":{"line_hashes":["18768621085448646307001774199887104283","93374316942925291244273634967322974642","161590431358123676568935454992550880906","92148593491386859782013470932680897551","123659105662047396412296602146039075125","195818613178541754245504552110243103958","43450431872990335751792943591283670313","106987073898418360256637578858320473377","183347015836270441868035023872223045084","212073938337863780447978151052667766045","309670263801451798605381809681899651599","247614672319011049154811586334740522044","237473971868900634033954528060497004504"],"threshold":0.9},"source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","id":"PUB-A-215814262-4090b204","signature_version":"v1"},{"signature_type":"Function","deprecated":false,"target":{"function":"adjust_ptr_min_max_vals","file":"kernel/bpf/verifier.c"},"id":"PUB-A-215814262-cb31468c","digest":{"function_hash":"322483173983893910112606866589989019594","length":4756},"source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","signature_version":"v1"}],"severity":"Moderate","spl":"2022-06-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-215814262.json"}}],"schema_version":"1.7.5"}