CBL Mariner 2.0 Security Update: kernel (CVE-2022-3106)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3106 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in...

CVE-2022-3106

The connected Astra Linux advisory and the CVE entry confirm CVE-2022-3106 affects the Linux kernel up to 5.16-rc6, where ef100_update_stats (drivers/net/ethernet/sfc/ef100_nic.c) does not check the return value of kmalloc(). The lack of a kmalloc() return check is the root cause; without it, all...