CVE-2022-1679

תיאור (מקור, אנגלית)

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-15/10/2026

CWE

CWE-416

מוצרים מושפעים

linux: linux kernel; debian: debian linux; netapp: h410c firmware; netapp: h410c; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h300e firmware; netapp: h300e; netapp: h500e firmware; netapp: h500e; netapp: h700e firmware

קישורים

• https://lore.kernel.org/lkml/87ilqc7jv9.fsf%40kernel.org/t/ PatchThird Party Advisory
• https://lore.kernel.org/lkml/87ilqc7jv9.fsf%40kernel.org/t/ PatchThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220629-0007/ Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220629-0007/ Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html