{"id":"PUB-A-215814262","details":"In  kernel/bpf/verifier.c , there is a possible way to manipulate pointer arithmetic  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-215814262","CVE-2022-23222"],"modified":"2026-03-11T06:36:56.345057Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"spl":"2022-06-05","fixes":["https://android.googlesource.com/kernel/common/+/35ab8c9085b0a"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["18768621085448646307001774199887104283","93374316942925291244273634967322974642","161590431358123676568935454992550880906","92148593491386859782013470932680897551","123659105662047396412296602146039075125","195818613178541754245504552110243103958","43450431872990335751792943591283670313","106987073898418360256637578858320473377","183347015836270441868035023872223045084","212073938337863780447978151052667766045","309670263801451798605381809681899651599","247614672319011049154811586334740522044","237473971868900634033954528060497004504"]},"target":{"file":"kernel/bpf/verifier.c"},"source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","id":"PUB-A-215814262-4090b204","signature_type":"Line","signature_version":"v1","deprecated":false},{"digest":{"function_hash":"322483173983893910112606866589989019594","length":4756},"target":{"function":"adjust_ptr_min_max_vals","file":"kernel/bpf/verifier.c"},"source":"https://android.googlesource.com/kernel/common/+/35ab8c9085b0a","id":"PUB-A-215814262-cb31468c","signature_type":"Function","signature_version":"v1","deprecated":false}],"severity":"Moderate","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/PUB-A-215814262.json"}}],"schema_version":"1.7.5"}