CVE-2022-42719

תיאור (מקור, אנגלית)

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

מדדים

CVSS 3.1

8.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-19/10/2026

CWE

CWE-416

מוצרים מושפעים

linux: linux kernel; fedoraproject: fedora; debian: debian linux

קישורים

• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?‮… Mailing ListPatchVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?‮… Mailing ListPatchVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/2 Mailing ListPatchThird Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204051 Issue TrackingPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/2 Mailing ListPatchThird Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204051 Issue TrackingPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/5 ExploitMailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/5 ExploitMailing ListThird Party Advisory
• http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-‮…
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory