CVE-2022-42721

תיאור (מקור, אנגלית)

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-19/10/2026

CWE

CWE-835

מוצרים מושפעים

linux: linux kernel; fedoraproject: fedora; debian: debian linux

קישורים

• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?‮… Mailing ListPatchVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?‮… Mailing ListPatchVendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204060 Issue TrackingPatchThird Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204060 Issue TrackingPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/5 ExploitMailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/10/13/5 ExploitMailing ListThird Party Advisory
• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-‮… Third Party AdvisoryVDB Entry
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…