CVE-2022-3113

MEDIUM 5.5EPSS 0.7%

An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.

CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.65% chance of exploitation in the next 30 days, 49th percentile
Published: 2022-12-14
Updated: 2025-04-22

Metasploit modules (1)

rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/roxy_wi_exec.rb

References

Related