PT-2022-5913 · Linux+8 · Linux Kernel+8
Jiasheng Jiang
·
Published
2022-01-05
·
Updated
2026-03-14
·
CVE-2022-3108
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.16-rc6
Description
An issue was discovered in the Linux kernel where the function
kfd parse subtype iolink in the module drivers/gpu/drm/amd/amdkfd/kfd crat.c lacks a check of the return value of the function kmemdup(). This issue can be exploited to cause a denial of service or potentially elevate privileges.Recommendations
For Linux kernel versions through 5.16-rc6, as a temporary workaround, consider disabling the
kfd parse subtype iolink function until a patch is available. Restrict access to the vulnerable module drivers/gpu/drm/amd/amdkfd/kfd crat.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Fix
Unchecked Return Value
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu