Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2022-29156: drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
CVE-2022-29156 · published 4 years ago
Summary
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
What to do
- Update debian linux to version 5.16.12-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.10.20, < 5.10.103 >= 5.11.3, < 5.15.26 >= 5.16, < 5.16.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | netapp | h300e_firmware |
All versions
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h300s_firmware |
All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h410c_firmware |
All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h410s_firmware |
All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500e_firmware |
All versions
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500s_firmware |
All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700e_firmware |
All versions
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700s_firmware |
All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.16.12-1 Fix: upgrade to 5.16.12-1
|
Original advisory text
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29156... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-29156 Vendor Advisory
- https://github.com/torvalds/linux/commit/8700af2cc18c919b2a83e74e0479038fd113c15... Patch
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.12 URL
- https://security.netapp.com/advisory/ntap-20220602-0002/ Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-29156 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-415Double Free
Timeline
Published13 Apr 2022
Updated4 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta