Lucene search

K
nvd[email protected]NVD:CVE-2022-3112
HistoryDec 14, 2022 - 9:15 p.m.

CVE-2022-3112

2022-12-1421:15:12
CWE-476
web.nvd.nist.gov
linux
kernel
version 5.16-rc6
null pointer dereference
cve-2022-3112
drivers
staging
media

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.

Affected configurations

NVD
Node
linuxlinux_kernelRange<5.16.0
OR
linuxlinux_kernelMatch5.16.0
OR
linuxlinux_kernelMatch5.16.0rc1
OR
linuxlinux_kernelMatch5.16.0rc2
OR
linuxlinux_kernelMatch5.16.0rc3
OR
linuxlinux_kernelMatch5.16.0rc4
OR
linuxlinux_kernelMatch5.16.0rc5
OR
linuxlinux_kernelMatch5.16.0rc6

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%