CVE-2022-3105: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

Affected products

• Linux Linux Kernel: before 5.16.0 (fixed in 5.16.0); version 5.16.0 only

Published 2022-12-14. Last modified 2026-06-17.