PT-2022-6041 · Linux+4 · Linux Kernel+4

Ajay Kathat + 2 · Published 2022-11-24 · Updated 2023-12-06 · CVE-2022-47521

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.11

Description The issue is related to the WILC1000 wireless driver in the Linux kernel, where missing validation of IEEE80211 P2P ATTR CHANNEL LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames. This can potentially allow an attacker to execute arbitrary code or cause a denial of service.

Recommendations For Linux kernel versions prior to 6.0.11, update to version 6.0.11 or later to resolve the issue. As a temporary workaround, consider disabling the WILC1000 wireless driver until a patch is available. Restrict access to the vulnerable cfg80211.c module to minimize the risk of exploitation. Avoid using the IEEE80211 P2P ATTR CHANNEL LIST attribute in the affected API endpoints until the issue is resolved.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2022-3272

ALT-PU-2022-3273

ALT-PU-2022-3284

ALT-PU-2022-3285

ALT-PU-2022-3303

ALT-PU-2022-3310

ALT-PU-2022-3311

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-1044

ALT-PU-2023-1066

ALT-PU-2023-1378

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

AZL-11859

BDU:2022-07505

CVE-2022-47521

DLA-3244-1

OESA-2022-2162

USN-5911-1

USN-5912-1

USN-5929-1

USN-5935-1

USN-5938-1

USN-5941-1

USN-5950-1

USN-5962-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 75

• https://github.com/torvalds/linux/commit/f9b62f9843c7b0afdaecabbcebf1dbba18599408 · Patch
• https://osv.dev/vulnerability/USN-5912-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-4378 · Security Note
• https://bdu.fstec.ru/vul/2022-07505 · Security Note
• https://osv.dev/vulnerability/DLA-3244-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5962-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5938-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-47521 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-47521 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3643 · Security Note
• https://osv.dev/vulnerability/USN-5911-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3344 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5935-1 · Vendor Advisory