Vulnerability · Published May 9, 2022 · Assigned by Mend

CVE-2022-23066Solana rBPF - Incorrect Calculation in sdiv instruction

Critical 9.1

In plain English

A critical-severity security flaw in rbpf from solana-labs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)2.5%top 15.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.

Affected products (as reported)

Vendor	Product	Versions
solana-labs	rbpf	0.2.26 – before unspecifiedunspecified – through 0.2.27

Weakness: CWE-682 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

https://github.com/solana-labs/rbpf/commit/e61e045f8c244de978401d186dcfd50838817297 x_refsource_MISC
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23066 x_refsource_MISC
https://blocksecteam.medium.com/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched-a701870e1324 x_refsource_MISC