CVE-2022-42721
MEDIUM 5.5EPSS 0.6%
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.65% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2022-10-13
- Updated
- 2026-10-14
Proof-of-concept exploits (1)
Security advisories
- https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=bcca8520…
- http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1…
- https://bugzilla.suse.com/show_bug.cgi?id=1204060
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
- https://www.debian.org/security/2022/dsa-5257