CVE-2022-3104

2022-12-1421:15:11

Debian Security Bug Tracker

security-tracker.debian.org

linux

kernel

version

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.8%

JSON

An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.18.5-1linux_5.18.5-1_all.deb
Debian11alllinux< 5.10.127-1linux_5.10.127-1_all.deb
Debian999alllinux< 5.18.5-1linux_5.18.5-1_all.deb
Debian13alllinux< 5.18.5-1linux_5.18.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.18.5-1	linux_5.18.5-1_all.deb
Debian	11	all	linux	< 5.10.127-1	linux_5.10.127-1_all.deb
Debian	999	all	linux	< 5.18.5-1	linux_5.18.5-1_all.deb
Debian	13	all	linux	< 5.18.5-1	linux_5.18.5-1_all.deb