IM
IronMonkey Threat Research

CVE-2022-41674 HIGH

Published: 2022-10-14 | Last Modified: 2025-05-15 | Status: Modified

Description

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

Additional Descriptions (1)

Se ha detectado un problema en el kernel de Linux versiones hasta 5.19.11. Los atacantes capaces de inyectar tramas WLAN podrían causar un desbordamiento del búfer en la función ieee80211_bss_info_update en el archivo net/mac80211/scan.c

CVSS Metrics

Base Score: 8.1 (HIGH)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack VectorADJACENT_NETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.2

Weaknesses

Source Type Description
[email protected] Primary
en CWE-787
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-787

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd340f0c800> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2dbcdde00> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd348c92640> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340f0f580> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2dbcdee00> Operating System
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd2dbcde200> Operating System
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd385453780> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd348c92400> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd384e12e80> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd2dbcdde80> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

References