Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-3112: An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the ...

CVE-2022-3112 · published 3 years ago

Summary

An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.

What to do

Update debian linux to version 5.17.3-1.
Update linux linux_kernel to version 5.16.0 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	linux	linux_kernel	< 5.16.0 5.16.0 `cpe:2.3:o:linux:linux_kernel::::::::`
Debian:12	debian	linux	< 5.17.3-1 Fix: upgrade to 5.17.3-1

Original advisory text

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.... URL
https://bugzilla.redhat.com/show_bug.cgi?id=2153068 Third Party Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3112.j... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-3112 Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2022-3112 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-476NULL Pointer Dereference

Timeline

Published14 Dec 2022

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2022-3112 · NVD

CVE-2022-3112 · OSV

DEBIAN-CVE-2022-3112 · OSV

Track software like this

Free during beta