DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2022-10-13
Ein Angreifer aus dem angrenzenden Netzwerk oder ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen und möglicherweise beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-42722US | medium5.5 | — | ||
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service a… | ||||
| CVE-2022-42721US | medium5.5 | — | ||
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to c… | ||||
| CVE-2022-42720US | high7.8 | — | ||
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN… | ||||
| CVE-2022-41674US | high8.1 | — | ||
An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac8… | ||||
| CVE-2022-42719US | high8.8 | — | ||
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN fram… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-10081 vom 2022-12-13external
- Oracle Linux Security Advisory ELSA-2023-12009 vom 2023-01-10external
- Red Hat Security Advisory RHSA-2023:2148 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2458 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2736 vom 2023-05-16external
- Red Hat Security Advisory RHSA-2023:2951 vom 2023-05-16external
- Red Hat Security Advisory RHSA-2024:1188 vom 2024-03-06external
- Red Hat Bugzilla - Bug 2134377 vom 2022-10-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan