---
id: CVE-2022-49967
title: 'bpf: Fix a data-race around bpf_jit_limit.'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bpf: Fix a data-race around bpf_jit_limit.

  While reading bpf_jit_limit, it can be changed concurrently via sysctl,
  WRITE_ONCE() in __do_proc_doulongvec_minmax(). The s…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 <
    ba632ad0bacb13197a8f38e7526448974e87f292
  - >-
    Linux >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 <
    0947ae1121083d363d522ff7518ee72b55bd8d29
  - Linux c98446e1bab6253ddce7144cc2a91c400a323839
  - Linux a1fe647042affe713a17243cd10e9b25f3d83948
  - Linux 43caa29c99db5a41b204e8ced01b00e151335ca8
  - Linux >= 4.9.190 < 4.10
  - Linux >= 4.14.140 < 4.15
  - Linux >= 4.19.47 < 4.20
  - Linux 4.20
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:52:09.206713Z'
published: '2025-06-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:12.488Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49967'
references:
  - url: 'https://git.kernel.org/stable/c/ba632ad0bacb13197a8f38e7526448974e87f292'
  - url: 'https://git.kernel.org/stable/c/0947ae1121083d363d522ff7518ee72b55bd8d29'
tags:
  - cve.org
epss: 0.00144
epssPercentile: 0.03694
ingestedAt: '2026-11-05T22:38:31.632Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a data-race around bpf_jit_limit.

While reading bpf_jit_limit, it can be changed concurrently via sysctl,
WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit
is long, so we need to add a paired READ_ONCE() to avoid load-tearing.

## Affected

- `Linux >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < ba632ad0bacb13197a8f38e7526448974e87f292`
- `Linux >= ede95a63b5e84ddeea6b0c473b36ab8bfd8c6ce3 < 0947ae1121083d363d522ff7518ee72b55bd8d29`
- `Linux c98446e1bab6253ddce7144cc2a91c400a323839`
- `Linux a1fe647042affe713a17243cd10e9b25f3d83948`
- `Linux 43caa29c99db5a41b204e8ced01b00e151335ca8`
- `Linux >= 4.9.190 < 4.10`
- `Linux >= 4.14.140 < 4.15`
- `Linux >= 4.19.47 < 4.20`
- `Linux 4.20`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.