CVE-2022-29156

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 5.10.20 < 5.10.103

Linux ≫ Linux Kernel Version >= 5.11.3 < 5.15.26

Linux ≫ Linux Kernel Version >= 5.16 < 5.16.12

Netapp ≫ H300e Version-

Netapp ≫ H300s Version-

Netapp ≫ H410c Version-

Netapp ≫ H410s Version-

Netapp ≫ H500e Version-

Netapp ≫ H500s Version-

Netapp ≫ H700e Version-

Netapp ≫ H700s Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.16%	0.37

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Vendor Advisory

Mailing List

Patch

Third Party Advisory

Third Party Advisory

CVE Source (NVD)

CVE Source (JSON)

EUVD