CVE-2022-29156

Public on 2022-04-13

Modified on 2023-01-18

Description

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.

Severity

Important

See what this means

CVSS v3 Base Score

7.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 2023	kernel	2023-02-17 20:46	ALAS2023-2023-070

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C
Amazon Linux	CVSSv3	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	CVSSv3	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	CVSSv2	7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C

References

Red Hat: CVE-2022-29156 Mitre: CVE-2022-29156 FAQs regarding Amazon Linux ALAS/CVE Severity