ZeroDay Findings
Sign inSign up

Findings

CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able t…

Published Oct 14, 2022 · updated Oct 14, 2026 · linux linux kernel

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2022 · NIST NVD

    Detected

    Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

Affected

  • cpe debian/debian linux10.0
  • cpe fedoraproject/fedora36
  • cpe fedoraproject/fedora37
  • cpe linux/linux kernelversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2022-42720

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-42720

    30-day exploitation probability 0.9%

    first.org
  • NIST NVDVulnerability recordCVE-2022-42720

    Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

    nvd.nist.gov
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References

CVE-2022-42720 · ZeroDay Findings