CVE-2022-3115: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability was discovered in the Linux kernel through version 5.16-rc6, identified as CVE-2022-3115. The issue resides in the malidp_crtc_reset function within drivers/gpu/drm/arm/malidp_crtc.c, where it fails to check the return value of kzalloc(), potentially leading to a null pointer dereference (NVD, CVE).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) with a CVSS v3.1 base score of 5.5 (Medium). The issue specifically occurs in the ARM Mali display processor driver where the malidp_crtc_reset function fails to validate the return value of a memory allocation function, which could result in dereferencing a null pointer (NVD, Kernel Commit).

The vulnerability affects system availability by potentially causing a null pointer dereference, which could lead to a system crash or denial of service condition on affected Linux systems running the vulnerable kernel versions (NVD).

The vulnerability was fixed in Linux kernel 5.19-rc1 with a patch that adds proper return value checking for the kzalloc() function. The fix was implemented through commit 73c3ed7495c67b8fbdc31cf58e6ca8757df31a33 (Kernel Commit).