CVE-2022-47520

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.11

Description An issue in the Linux kernel's WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet, potentially allowing an attacker to cause a denial of service or elevate privileges.

Recommendations For Linux kernel versions prior to 6.0.11, update to version 6.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the hif.c file in the drivers/net/wireless/microchip/wilc1000 directory to minimize the risk of exploitation. Avoid using the RSN information element in Netlink packets until the issue is resolved.