kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c

A list corruption flaw was found in cfg80211addnontranslist in the net/wireless/scan.c function in the Linux kernel. This flaw could lead to a denial of service...

kernel: use-after-free in bss_ref_get in net/wireless/scan.c

A use-after-free flaw was found in bssrefget in the net/wireless/scan.c in the Linux kernel. This issue can lead to a denial of service or arbitrary code execution...

SUSE CVE-2016-5028

The printframeinstbytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via an object file with empty bss-like sections...

SUSE CVE-2022-36123

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...

SUSE CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

SUSE CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

SUSE CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

PT-2023-13289 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing BTM action frame. Recommendations: At the moment, there is no information about a newer version...

ASB-A-253642015

In multiple functions of scan.c, there is a possible way to inject WLAN frames due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5752-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5752-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-fr...

GSD-2022-1007328 wifi: cfg80211: fix BSS refcounting bugs

wifi: cfg80211: fix BSS refcounting bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

GSD-2022-1007326 wifi: cfg80211: avoid nontransmitted BSS list corruption

wifi: cfg80211: avoid nontransmitted BSS list corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

GSD-2022-1007155 wifi: cfg80211: fix BSS refcounting bugs

wifi: cfg80211: fix BSS refcounting bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.74 by commit...

GSD-2022-1006924 wifi: cfg80211: avoid nontransmitted BSS list corruption

wifi: cfg80211: avoid nontransmitted BSS list corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

PT-2022-35583 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A bug in BSS refcounting has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.148, update to...

PT-2022-35179

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.2 Description The issue is related to a potential security vulnerability in the Linux Kernel's cfg80211 component, which could lead to corruption of the BSS list. The actual impact and attack plausibility ha...

PT-2022-35702 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.218 Description: The issue is related to BSS refcounting bugs in the wifi cfg80211 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35581

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.148 Description A potential issue exists in the wifi cfg80211 component, which may lead to nontransmitted BSS list corruption. The actual impact and attack plausibility have not yet been proven...

PT-2022-35410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.74 Description A bug in BSS refcounting has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.74, update to versio...

PT-2022-35180 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue is related to BSS refcounting bugs in the cfg80211 component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...