USN-8875-2: Linux kernel (NVIDIA) vulnerabilities
Ubuntu fixed NVIDIA Linux kernel flaws, including local crash bug CVE-2022-3114.
Ubuntu issued USN-8875-2 for its Linux kernel NVIDIA packages. CVE-2022-3114 is a null-pointer dereference in the i.MX clock driver when a memory allocation fails, which a local attacker could use to crash the system. The advisory also corrects additional flaws in the user-space API, several CPU architectures, User-Mode Linux, the block layer and the cryptographic API. No active exploitation is mentioned.
- CVE-2022-3114 is a null-pointer dereference in the i.MX clock driver.
- A local attacker could crash the system and cause a denial of service.
- The NVIDIA kernel package update also patches flaws across several architectures.
- Ubuntu does not report that the issues are being exploited.
Vulnerabilities mentionedAll →
- CVE-2022-31145.5<1%An issue was discovered in the Linux kernel through 5.16-rc6published · linux linux kernel
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-3114 | An issue was discovered in the Linux kernel through 5.16-rc6 An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference. NVD description · AI analysis pending |
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; -…
This source does not provide full text. Read it at ubuntu.com.