CVE-2022-3114: Null Pointer Dereference
[Suggested description] An issue was discovered in the Linux kernel through 5.16-rc6. imxregisteruartclocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.
------------------------------------------
[VulnerabilityType Other] NULL Pointer Dereference
------------------------------------------
[Vendor of Product] the development group
------------------------------------------
[Affected Product Code Base] Linux kernel - 5.16-rc6
------------------------------------------
[Reference] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=ed713e2bc093239ccd380c2ce8ae9e4162f5c037
------------------------------------------
[Discoverer] Jiasheng Jiang
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.19
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3114?
CVE-2022-3114 has been classified as a medium severity vulnerability due to the potential for a null pointer dereference.
How do I fix CVE-2022-3114?
To fix CVE-2022-3114, you should upgrade to at least Linux kernel version 5.19 or later.
What software is affected by CVE-2022-3114?
CVE-2022-3114 affects Linux kernel versions up to 5.16-rc6.
What happens if CVE-2022-3114 is exploited?
Exploitation of CVE-2022-3114 could lead to a system crash or denial of service due to the null pointer dereference.
Is there a workaround for CVE-2022-3114?
There are no known workarounds for CVE-2022-3114; upgrading is the recommended mitigation.