CVE-2022-3078 is a vulnerability in the Linux kernel, specifically affecting versions through 5.16-rc6, due to a missing check after vzalloc() and a lack of free after allocation in the vidtv_s302m.c driver. This issue has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, and its primary impact is a high availability compromise. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.18CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c.
Sep 13, 2022kernel: NULL pointer dereference in drivers/media/test-drivers/vidtv/vidtv_s302m.c
Jan 14, 2022