CVE-2022-41674CWE-787

CVE-2022-41674

High · published October 14, 2022

CVSS v3.1
8.1
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04144 · 90.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-10-14T04:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.1, < 5.4.2185.4.218
linux/linux_kernel≥ 5.5, < 5.10.1485.10.148
linux/linux_kernel≥ 5.11, < 5.15.745.15.74
linux/linux_kernel≥ 5.16, < 5.19.165.19.16
linux/linux_kernel≥ 6.0, < 6.0.26.0.2
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (23)
https://www.openwall.com/lists/oss-security/2022/10/13/5 · [email protected]http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2022/10/13/2 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.suse.com/show_bug.cgi?id=1203770 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=aebe9f4639b13a1f4e9a6b42cdd2e38c617b442d · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5257 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2022/10/13/5 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttp://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html · [email protected]http://www.openwall.com/lists/oss-security/2022/10/13/2 · [email protected]https://bugzilla.suse.com/show_bug.cgi?id=1203770 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.c · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=aebe9f4639b13a1f4e9a6b42cdd2e38c617b442d · [email protected]https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ · [email protected]https://www.debian.org/security/2022/dsa-5257 · [email protected]
EPSS history
Timeline
  • 13 OCT 00:00Z
    An issue was discovered in the Linux kernel before 5.19.16
    cvelistv5