CVE-2022-29156: 
Linux Kernel vulnerability analysis and mitigation

A double free vulnerability was discovered in the Linux kernel's RDMA Transport (RTRS) client implementation, specifically in the drivers/infiniband/ulp/rtrs/rtrs-clt.c file before version 5.16.12. The vulnerability is tracked as CVE-2022-29156 and was disclosed on April 13, 2022. The issue is related to the rtrscltdev_release function (NVD).

The vulnerability occurs in the RDMA Transport client implementation where a double free condition can happen in the rtrscltdev_release function. The issue stems from incorrect memory management in the driver's release functionality. The vulnerability has been assigned a CVSS v3.1 score of 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NetApp Advisory).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). The vulnerability requires local access and low privileges to exploit (NetApp Advisory).

The vulnerability was fixed in Linux kernel version 5.16.12. The fix involves proper handling of memory deallocation in the rtrscltdevrelease function and restructuring the device initialization process. The patch replaces deviceregister() with deviceinitialize() and deviceadd() to ensure proper resource management (GitHub Commit).