CVE-2022-42721

2022-10-1400:00:00

ubuntu.com

linux kernel bug

local attackers

linked list corruption

code execution

wlan frames injection

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

A list management bug in BSS handling in the mac80211 stack in the Linux
kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers
(able to inject WLAN frames) to corrupt a linked list and, in turn,
potentially execute code.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchbackport-iwlwifi-dkms< anyUNKNOWN
ubuntu20.04noarchbackport-iwlwifi-dkms< 8324-0ubuntu3~20.04.5UNKNOWN
ubuntu22.04noarchbackport-iwlwifi-dkms< 9858-0ubuntu3.1UNKNOWN
ubuntu22.10noarchbackport-iwlwifi-dkms< 9904-0ubuntu3.1UNKNOWN
ubuntu24.04noarchbackport-iwlwifi-dkms< anyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-131.147UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-52.58UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-23.24UNKNOWN
ubuntu23.04noarchlinux< 6.1.0-16.16UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1088.96UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	backport-iwlwifi-dkms	< any	UNKNOWN
ubuntu	20.04	noarch	backport-iwlwifi-dkms	< 8324-0ubuntu3~20.04.5	UNKNOWN
ubuntu	22.04	noarch	backport-iwlwifi-dkms	< 9858-0ubuntu3.1	UNKNOWN
ubuntu	22.10	noarch	backport-iwlwifi-dkms	< 9904-0ubuntu3.1	UNKNOWN
ubuntu	24.04	noarch	backport-iwlwifi-dkms	< any	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-131.147	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-52.58	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-23.24	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.1.0-16.16	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1088.96	UNKNOWN