CVE-2022-3104: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference.

Affected products

• Linux Linux Kernel: before 5.16.0 (fixed in 5.16.0); version 5.16.0 only

Published 2022-12-14. Last modified 2026-06-17.