CVE-2022-3105

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6

Description An issue was discovered in the Linux kernel where the uapi finalize function in drivers/infiniband/core/uverbs uapi.c lacks a check of kmalloc array(). This issue is related to a pointer dereference error. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations For Linux kernel versions through 5.16-rc6, as a temporary workaround, consider disabling the uapi finalize() function until a patch is available. Restrict access to the drivers/infiniband/core/uverbs uapi.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.