CVE-2022-3108

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6

Description An issue was discovered in the Linux kernel where the function kfd parse subtype iolink in the module drivers/gpu/drm/amd/amdkfd/kfd crat.c lacks a check of the return value of the function kmemdup(). This issue can be exploited to cause a denial of service or potentially elevate privileges.

Recommendations For Linux kernel versions through 5.16-rc6, as a temporary workaround, consider disabling the kfd parse subtype iolink function until a patch is available. Restrict access to the vulnerable module drivers/gpu/drm/amd/amdkfd/kfd crat.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.