Vulnerability CVE-2022-3105
Published: 2022-12-14

Description:
An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

Type:

CWE-476

 (NULL Pointer Dereference)

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=2153067
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=7694a7de22c53a312ea98960fcafc6ec62046531
Copyright 2026, cxsecurity.com

 

Back to Top