CVE-2022-29156: 
Linux Kernel vulnerability analysis and mitigation

A double free vulnerability was discovered in the Linux kernel's RDMA Transport (RTRS) client implementation, specifically in the drivers/infiniband/ulp/rtrs/rtrs-clt.c file before version 5.16.12. The vulnerability is tracked as CVE-2022-29156 and was disclosed on April 13, 2022. The issue is related to the rtrs_clt_dev_release function (NVD).

The vulnerability occurs in the RDMA Transport client implementation where a double free condition can happen in the rtrs_clt_dev_release function. The issue stems from incorrect memory management in the driver's release functionality. The vulnerability has been assigned a CVSS v3.1 score of 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NetApp Advisory).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). The vulnerability requires local access and low privileges to exploit (NetApp Advisory).

The vulnerability requires local access with low privileges to exploit. No public exploits have been identified, though public discussion of this vulnerability exists (NetApp Advisory).

The vulnerability was fixed in Linux kernel version 5.16.12. The fix involves proper handling of memory deallocation in the rtrs_clt_dev_release function and restructuring the device initialization process. The patch replaces device_register() with device_initialize() and device_add() to ensure proper resource management (GitHub Commit).