PT-2021-7532 · Linux+3 · Linux Kernel+3

Jiasheng Jiang · Published 2021-12-14 · Updated 2023-08-14 · CVE-2022-3115

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6

Description An issue was discovered in the Linux kernel where the malidp crtc reset function in drivers/gpu/drm/arm/malidp crtc.c lacks a check of the return value of kzalloc(), leading to a null pointer dereference. This could allow an attacker to cause a denial of service or elevate their privileges.

Recommendations For Linux kernel versions through 5.16-rc6, as a temporary workaround, consider disabling the malidp crtc reset function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2022-1093

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11615

BDU:2022-07335

CVE-2022-3115

OESA-2022-2161

OESA-2023-1013

OESA-2023-1035

OPENSUSE-SU-2023_0146-1

OPENSUSE-SU-2023_0147-1

OPENSUSE-SU-2023_0149-1

OPENSUSE-SU-2023_0152-1

SUSE-SU-2023:0146-1

SUSE-SU-2023:0147-1

SUSE-SU-2023:0149-1

SUSE-SU-2023:0152-1

SUSE-SU-2023:0406-1

SUSE-SU-2023:0591-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

References · 213

• https://osv.dev/vulnerability/CVE-2022-3115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3115 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41218 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-47942 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47940 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-47943 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-3115 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0591-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2873 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0406-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3114 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3104 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3112 · Security Note