CVEvulnerability
CVE-2022-42719
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-10-13
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Affected configurations
• linux linux kernel (>= 5.2 < 5.4.219)
• linux linux kernel (>= 5.5 < 5.10.149)
• linux linux kernel (>= 5.11 < 5.15.74)
• linux linux kernel (>= 5.16 < 5.19.16)
• linux linux kernel (>= 6.0 < 6.0.2)
• fedoraproject fedora 35
• fedoraproject fedora 36
• fedoraproject fedora 37
• debian debian linux 10.0
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html packetstormsecurity.com
- http://www.openwall.com/lists/oss-security/2022/10/13/2 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/13/5 Exploit, Mailing List, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1204051 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=ff05d4b45dd89b922578dac497dcabf57cf771c6 Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20230203-0008/ security.netapp.com
- https://www.debian.org/security/2022/dsa-5257 Third Party Advisory
- http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html packetstormsecurity.com
- http://www.openwall.com/lists/oss-security/2022/10/13/2 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/13/5 Exploit, Mailing List, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1204051 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=ff05d4b45dd89b922578dac497dcabf57cf771c6 Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20230203-0008/ security.netapp.com
- https://www.debian.org/security/2022/dsa-5257 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html cert-portal.siemens.com