CVE-2022-3108

Опубликовано: 13 дек. 2022

Источник: redhat

CVSS3: 5.5

Описание

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	kernel	Out of support scope
Red Hat Enterprise Linux 7	kernel	Out of support scope
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope
Red Hat Enterprise Linux 8	kernel-rt	Fixed	RHSA-2022:1975	10.05.2022
Red Hat Enterprise Linux 8	kernel	Fixed	RHSA-2022:1988	10.05.2022
Red Hat Enterprise Linux 9	kernel	Fixed	RHSA-2022:8267	15.11.2022
Red Hat Enterprise Linux 9	kernel-rt	Fixed	RHSA-2022:7933	15.11.2022
Red Hat Enterprise Linux 9	kernel	Fixed	RHSA-2022:8267	15.11.2022

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-252->CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=2153052kernel: drm/amdkfd: NULL pointer dereference in kfd_parse_subtype_iolink()

5.5 Medium

CVSS3

Связанные уязвимости

CVE-2022-3108

CVSS3: 5.5

ubuntu

больше 2 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

CVE-2022-3108

CVSS3: 5.5

nvd

больше 2 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

CVE-2022-3108

CVSS3: 5.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2022-3108

CVSS3: 5.5

debian

больше 2 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_pars ...

GHSA-p3w8-hj2c-x6cm

CVSS3: 5.5

github

больше 2 лет назад

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

5.5 Medium

CVSS3