VULNERABILITY INTELLIGENCE
CVE-2022-42721
CVSS score5.5 MEDIUM
EPSS probability0.65%
CISA KEVNot currently listed
Published2022-10-14
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
Weakness classification
- nvd@nist.gov: CWE-835
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-835
Primary references
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Exploit, Mailing List, Third Party Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Vendor Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory