← Database

CVE-2022-3107

MEDIUM CVSS: 5.5 Published: 2022-12-14 Modified: 2026-06-17

Description

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-476, CWE-476

References