CVE-2022-41674

Advisory lineage Upstream: 0 Downstream: 34
Modified
Published: 13 Oct 2022, 00:00
Last modified:15 May 2025, 14:26

Vulnerability Summary

Overall Risk (default)
medium
42/100
CVSS Score
8.1 HIGH
v3.1 (cve.org)
EPSS Score
0.4% LOW
0% probability -0.11%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

13 Oct 2022, 00:00
Published
Vulnerability first disclosed
15 May 2025, 14:26
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

CVSS Metrics

  • v3.1•HIGH•Score: 8.1CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS Trends

Current EPSS score: 0.40%• Percentile: 61%

Techniques & Countermeasures

  • CWE-787•Out-of-bounds Write

    The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • debian•debian_linux

    10.0 | 11.0

  • fedoraproject•fedora

    35 | 36 | 37

  • linux•linux_kernel

    ≥ 5.1, < 5.4.218 | ≥ 5.5, < 5.10.148 | ≥ 5.11, < 5.15.74 | ≥ 5.16, < 5.19.16 | ≥ 6.0, < 6.0.2

References (11)