CVE-2022-42721

MEDIUM 5.5EPSS 0.6%

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.60% chance of exploitation in the next 30 days, 46th percentile
Published: 2022-10-13
Updated: 2025-05-15

Proof-of-concept exploits (1)

http://www.openwall.com/lists/oss-security/2022/10/13/5

References

Related