CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

CVE-2022-42719

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers able to inject WLAN frames to crash the kernel and potentially execute code...

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

Microsoft Windows WLAN Service privilege elevation vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows WLAN Service, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...

CVE-2022-42719

Summary of CVE-2022-42719 : A use-after-free in the mac80211 wireless stack when parsing a multi-BSSID element in the Linux kernel (versions 5.2–5.19.14) could allow a remote attacker who can inject WLAN frames to crash the kernel and potentially execute code. The vulnerability impacts the Linux ...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.2 through 5.19.14 that stems from post-release reuse in the mac80211 stack when parsing multiple BSSID elements, whic...

CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

PT-2022-5930

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.19.x before 5.19.16 Description The issue allows local attackers to inject WLAN frames into the mac80211 stack, potentially causing a NULL pointer dereference denial-of-service attack against the beacon...

CVE-2022-42720

CVE-2022-42720 concerns the Linux kernel mac80211 WLAN stack. It describes refcounting bugs in multi-BSS handling that can trigger use-after-free when WLAN frames are injected, potentially enabling local code execution. Affected are kernel versions 5.1–5.19.x prior to 5.19.16; several distributio...

CVE-2022-42722

CVE-2022-42722 affects Linux kernels 5.8–5.19.x (pre-5.19.16). Local attackers can inject WLAN frames into the mac80211 stack, triggering a NULL pointer dereference and a denial-of-service against beacon protection for P2P devices. Affected products reference Linux kernel/mac80211 internals and e...

CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

CVE-2022-42722

In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices...

CVE-2022-41674

CVE-2022-41674 affects the Linux kernel (pre-5.19.16) and is triggered by injecting WLAN frames, causing a buffer overflow in ieee80211_bss_info_update() within net/mac80211/scan.c. Reported impact includes high confidentiality and high availability risk (I=None, A=High, C=High) with adjacent att...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.1 through 5.19.14, which stems from various reference counting errors handled by multiple BSSs in the mac80211 stack,...

CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

CVE-2022-42719: Use After Free

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers able to inject WLAN frames to crash the kernel and potentially execute code...

CVE-2022-42721

CVE-2022-42721 is a local, WLAN-frame–triggered vulnerability in the Linux kernel mac80211/BSS handling (linked-list corruption in net/wireless/scan.c; cfg80211_add_nontrans_list) affecting 5.1–5.19.x prior to 5.19.16. Exploitation could enable code execution via crafted frames; patches exist in ...

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...