NetSight
high7.8

CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers…

Impact

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.1 before 5.4.218
from 5.5 before 5.10.148
from 5.11 before 5.15.74
from 5.16 before 5.19.16
from 6.0 before 6.0.2
FedoraprojectFedora
Versions 36, 37
DebianDebian Linux
Versions 10.0, 11.0

Weakness classification

References