Lucene search
HistoryDec 14, 2022 - 9:15 p.m.
CVE-2022-3107
linux
kernel
netvsc
ethtool
null pointer
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%
An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.
Affected configurations
Node
linuxlinux_kernelRange<5.16.0
ORlinuxlinux_kernelMatch5.16.0-
ORlinuxlinux_kernelMatch5.16.0rc1
ORlinuxlinux_kernelMatch5.16.0rc2
ORlinuxlinux_kernelMatch5.16.0rc3
ORlinuxlinux_kernelMatch5.16.0rc4
ORlinuxlinux_kernelMatch5.16.0rc5
ORlinuxlinux_kernelMatch5.16.0rc6
Related
cvelist
cvelist
CVE-2022-3107
2022-12-14 00:00:00
cve
cve
CVE-2022-3107
2022-12-14 21:15:11
prion
prion
Null pointer dereference
2022-12-14 21:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-3107)
2023-03-20 00:00:00
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12242)
2023-04-10 00:00:00
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12243)
2023-04-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-3107 affecting package kernel 5.10.155.1-1
2022-12-27 17:56:16
CVE-2022-3107 affecting package kernel for versions less than 5.15.86.1-1
2023-01-17 16:47:16
debiancve
debiancve
CVE-2022-3107
2022-12-14 21:15:11
veracode
veracode
NULL Pointer Dereference
2023-03-10 20:27:45
redhatcve
redhatcve
CVE-2022-3107
2022-12-13 22:11:54
ubuntucve
ubuntucve
CVE-2022-3107
2022-12-14 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2023-04-10 00:00:00
Unbreakable Enterprise kernel security update
2023-04-10 00:00:00
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0410-1)
2023-02-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0145-1)
2023-01-27 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0410-1)
2024-03-04 00:00:00
redhat
redhat
(RHSA-2022:7683) Moderate: kernel security, bug fix, and enhancement update
2022-11-08 06:26:19
(RHSA-2022:7444) Moderate: kernel-rt security and bug fix update
2022-11-08 06:19:55
(RHSA-2022:7933) Moderate: kernel-rt security and bug fix update
2022-11-15 06:11:40
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2022-3107