CVE-2022-42721

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.1 through 5.19.x before 5.19.16

Description A list management bug in BSS handling in the mac80211 stack could be used by local attackers to corrupt a linked list and potentially execute code. The issue is related to a logic error in the code, which could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Linux kernel versions 5.1 through 5.19.x before 5.19.16, update to version 5.19.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the mac80211 stack to minimize the risk of exploitation. Avoid using the cfg80211 add nontrans list function in the scan.c file until the issue is resolved.