High · published October 14, 2022
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.1, < 5.4.218 | 5.4.218 |
| linux/linux_kernel | ≥ 5.5, < 5.10.148 | 5.10.148 |
| linux/linux_kernel | ≥ 5.11, < 5.15.74 | 5.15.74 |
| linux/linux_kernel | ≥ 5.16, < 5.19.16 | 5.19.16 |
| linux/linux_kernel | ≥ 6.0, < 6.0.2 | 6.0.2 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |