MEDIUM 5.5 Microsoft
CVE-2022-42721
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and in turn potentially execute code.
Microsoft Security Update 2022-Oct: A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and in turn potentially execute code.
Affected Products
- cm1 kernel 5.10.149.1-1 on CBL Mariner 1.0
- cbl2 kernel 5.15.74.1-3 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-42721
- https://nvd.nist.gov/vuln/detail/CVE-2022-42721
This medium severity vulnerability with a CVSS score of 5.5 was published on 2022-10-11 via Microsoft. Affected: cm1 kernel 5.10.149.1-1 on CBL Mariner 1.0, cbl2 kernel 5.15.74.1-3 on CBL Mariner 2.0.
vulnfeed aggregates 9119 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.