CVE-2022-3105

Опубликовано: 13 дек. 2022

Источник: redhat

CVSS3: 5.5

EPSS Низкий

Описание

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	kernel	Out of support scope
Red Hat Enterprise Linux 7	kernel	Out of support scope
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope
Red Hat Enterprise Linux 9	kernel	Not affected
Red Hat Enterprise Linux 9	kernel-rt	Not affected
Red Hat Enterprise Linux 8	kernel-rt	Fixed	RHSA-2022:1975	10.05.2022
Red Hat Enterprise Linux 8	kernel	Fixed	RHSA-2022:1988	10.05.2022

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=2153067kernel: RDMA/uverbs: NULL pointer dereference in uapi_finalize()

EPSS

Процентиль: 12%

0.00216

Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVE-2022-3105

CVSS3: 5.5

ubuntu

больше 3 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

CVE-2022-3105

CVSS3: 5.5

nvd

больше 3 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

CVE-2022-3105

CVSS3: 5.5

msrc

больше 3 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

CVE-2022-3105

CVSS3: 5.5

debian

больше 3 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_fin ...

GHSA-wgp6-2g3r-9p4m

CVSS3: 5.5

github

больше 3 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

EPSS

Процентиль: 12%

0.00216

Низкий

5.5 Medium

CVSS3