CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.

Affected

Kernel

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.68% chance of exploitation in the next 30 days, 51st percentile

Published

2022-12-14

Updated

2025-04-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/roxy_wi_exec.rb

Security advisories

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id…
• https://bugzilla.redhat.com/show_bug.cgi?id=2153053

References

• CVE Record
• NVD entry