CVE-2022-47521

An issue was discovered in the Linux kernel before 6.0.11

High · published December 18, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.2th percentile
Published
2022-12-18T00:00Z
EPSS history
Timeline
  • 18 DEC 00:00Z
    An issue was discovered in the Linux kernel before 6.0.11
    cvelistv5