CVE-2022-41674: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2022-41674 is a high (CVSS 8.1) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 4.14% chance of exploitation in the next 30 days, higher than 90.8% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 31 · Related 21Timeline
- 13-10-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · AlpineEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- NVDNIST8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
4.14%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
Increase +0.25 pp
From 3.89% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu83 products
- backport-iwlwifi-dkmsAll versions (No fix recorded) | < 8324-0ubuntu3~20.04.5 | < 9858-0ubuntu3.1
- linux< 5.4.0-131.147 | < 5.15.0-52.58
- linux-aws< 5.4.0-1088.96 | < 5.15.0-1022.26
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.0.2-1
- debian_linuxEOL10.0 | 11.0
Alpine1 product
- linux-lts< 5.15.74-r0
Fedoraproject1 product
- fedoraEOL35 | 36 | 37
Linux1 product
- linux_kernel≥ 5.1, < 5.4.218 | ≥ 5.5, < 5.10.148 | ≥ 5.11, < 5.15.74 | ≥ 5.16, < 5.19.16 | ≥ 6.0, < 6.0.2
5 vendors · 88 products
References
24 links- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.cREPORTVendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
Show all 24 references
- packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.htmlThird Party AdvisoryVDB Entry
