HIGH 8.8 Microsoft
CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Microsoft Security Update 2022-Oct: A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Affected Products
- cm1 kernel 5.10.149.1-1 on CBL Mariner 1.0
- cbl2 kernel 5.15.74.1-3 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-42719
- https://nvd.nist.gov/vuln/detail/CVE-2022-42719
This high severity vulnerability with a CVSS score of 8.8 was published on 2022-10-11 via Microsoft. Affected: cm1 kernel 5.10.149.1-1 on CBL Mariner 1.0, cbl2 kernel 5.15.74.1-3 on CBL Mariner 2.0.
vulnfeed aggregates 9119 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.