PT-2022-5930 · Linux+9 · Linux Kernel+9

Soenke Huster · Published 2022-10-13 · Updated 2024-06-15 · CVE-2022-42722

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.19.x before 5.19.16

Description The issue allows local attackers to inject WLAN frames into the mac80211 stack, potentially causing a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices. This could lead to a denial-of-service condition.

Recommendations For Linux kernel versions 5.8 through 5.19.x before 5.19.16, update to version 5.19.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the mac80211 stack to minimize the risk of exploitation.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2023:2148

ALSA-2023:2458

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2022-2848

ALT-PU-2022-2860

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2023-1235

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11118

BDU:2022-07351

CESA-2023_2736

CESA-2023_2951

CVE-2022-42722

DLA-3173-1

DSA-5257-1

DSA-5257-2

LSN-0090-1

MGASA-2022-0379

MGASA-2022-0380

OESA-2022-2033

OPENSUSE-SU-2022_3775-1

OPENSUSE-SU-2022_3844-1

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4617-1

OPENSUSE-SU-2024:12437-1

OPENSUSE-SU-2024:13704-1

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_2148

RHSA-2023_2458

RHSA-2023_2736

RHSA-2023_2951

RHSA-2024:1188

SUSE-SU-2022:3775-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:3844-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3976-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4033-1

SUSE-SU-2022:4034-1

SUSE-SU-2022:4035-1

SUSE-SU-2022:4037-1

SUSE-SU-2022:4039-1

SUSE-SU-2022:4100-1

SUSE-SU-2022:4113-1

SUSE-SU-2022:4617-1

SUSE-SU-2022_3976-1

SUSE-SU-2022_4037-1

USN-5692-1

USN-5693-1

USN-5700-1

USN-5708-1

USN-5752-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 926

• 🔥 http://openwall.com/lists/oss-security/2022/10/13/5 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-42722 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2458.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42719 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5700-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4035-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2458.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3565 · Security Note
• https://osv.dev/vulnerability/OESA-2022-2033 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5693-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3521 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=b2d03cabe2b2e150ff5a381731ea0355459be09f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3534 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3566 · Security Note
• https://ubuntu.com/security/CVE-2022-42721 · Vendor Advisory