In cfg80211_add_nontrans_list of scan.c, there is a possible way to corrupt a list due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-42721US | medium5.5 | — | ||
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to c… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://android.googlesource.com/kernel/common/+/0a861bd25dad5FIX
- https://android.googlesource.com/kernel/common/+/0a8ee682e4f99FIX
- https://android.googlesource.com/kernel/common/+/21df3a583e8e0FIX
- https://android.googlesource.com/kernel/common/+/630060f117567FIX
- https://android.googlesource.com/kernel/common/+/7d998f6b7365dFIX
- https://android.googlesource.com/kernel/common/+/864f2d3482f4bFIX
- https://android.googlesource.com/kernel/common/+/93a3a32554079FIX
- https://android.googlesource.com/kernel/common/+/9a8ef2030510aFIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan