Vulnerabilities > CVE-2022-3105 - NULL Pointer Dereference vulnerability in Linux Kernel 5.16.0

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
CWE-476

Summary

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

Vulnerable Configurations

Part Description Count
OS
Linux
7

Common Weakness Enumeration (CWE)