CVE-2022-3108: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

Affected products

• Linux Linux Kernel: before 5.16.0 (fixed in 5.16.0); version 5.16.0 only

Published 2022-12-14. Last modified 2026-06-17.