CVE-2022-3104

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16-rc6

Description The issue is related to the lkdtm ARRAY BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel. It lacks a check of the return value of kmalloc() and will cause a null pointer dereference. This can lead to a denial of service or potentially allow an attacker to elevate their privileges.

Recommendations For Linux kernel versions prior to 5.16-rc6, consider disabling the lkdtm ARRAY BOUNDS function in the drivers/misc/lkdtm/bugs.c module as a temporary workaround until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the kmalloc() function in the affected module until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.