IM
IronMonkey Threat Research

CVE-2022-42719 HIGH

Published: 2022-10-13 | Last Modified: 2025-05-15 | Status: Modified

Description

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

Additional Descriptions (1)

Un uso de memoria previamente liberada en la pila mac80211 cuando ea analizado un elemento multi-BSSID en el kernel de Linux versiones 5.2 hasta 5.19.14, podría ser usado por atacantes (capaces de inyectar tramas WLAN) para bloquear el kernel y potencialmente ejecutar código

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-416
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-416

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd39c4d2600> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd39c4d0840> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3401d1400> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2d825b2c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd39c4d00c0> Operating System
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd384625640> Operating System
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd36945cd40> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd3855da640> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd38477f5c0> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd36945c040> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

References