CVE-2022-3106

Public on 2022-12-14

Modified on 2025-09-16

Description

An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().

Severity

Low

See what this means

CVSS v3 Base Score

3.6

See breakdown

Affected Packages

Platform	Package	Status
Amazon Linux 1	kernel	Not Affected
Amazon Linux 2 - Core	kernel	Not Affected
Amazon Linux 2 - Kernel-5.10 Extra	kernel	Not Affected
Amazon Linux 2 - Kernel-5.15 Extra	kernel	Not Affected
Amazon Linux 2 - Kernel-5.4 Extra	kernel	Not Affected
Amazon Linux 2023	kernel	Not Affected
Amazon Linux 2023	kernel6.12	Not Affected

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	3.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2022-3106 Mitre: CVE-2022-3106