Vulnerabilities > CVE-2022-3106 - NULL Pointer Dereference vulnerability in Linux Kernel

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
CWE-476
NVD
Published: 2022-12-14
Updated: 2024-11-21

Summary

An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().

Vulnerable Configurations

Part Description Count
OS
Linux
5167

Common Weakness Enumeration (CWE)

References