Lucene search

K
nvd[email protected]NVD:CVE-2022-3115
HistoryDec 14, 2022 - 9:15 p.m.

CVE-2022-3115

2022-12-1421:15:12
CWE-476
web.nvd.nist.gov
linux kernel
malidp_crtc_reset
kzalloc
null pointer dereference

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.

Affected configurations

NVD
Node
linuxlinux_kernelRange<5.16.0
OR
linuxlinux_kernelMatch5.16.0-
OR
linuxlinux_kernelMatch5.16.0rc1
OR
linuxlinux_kernelMatch5.16.0rc2
OR
linuxlinux_kernelMatch5.16.0rc3
OR
linuxlinux_kernelMatch5.16.0rc4
OR
linuxlinux_kernelMatch5.16.0rc5
OR
linuxlinux_kernelMatch5.16.0rc6

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%