Findings

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN…

Published Oct 14, 2022 · updated Oct 14, 2026 · linux linux kernel

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2022 · NIST NVD

    Detected

    A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux11.0
  • cpe fedoraproject/fedora35
  • cpe fedoraproject/fedora36
  • cpe fedoraproject/fedora37
  • cpe linux/linux kernelversion unspecified

Sources

  • CVE.orgCVE-2022-42721

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-42721

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDCVE-2022-42721

    A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References