CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

• CWE-787
• CWE-787

• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2022/10/13/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1203770Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.cVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=aebe9f4639b13a1f4e9a6b42cdd2e38c617b442dMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/10/13/5Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2022/10/13/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1203770Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/net/mac80211/scan.cVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=aebe9f4639b13a1f4e9a6b42cdd2e38c617b442dMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/10/13/5Exploit, Mailing List, Third Party Advisory

Published

Oct 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41668A CWE-704: Incorrect Project Conversion vulnerability exists…7.8
• CVE-2022-41669A CWE-347: Improper Verification of Cryptographic Signature …7.8
• CVE-2022-4167Incorrect Authorization check affecting all versions of GitL…7.5
• CVE-2022-41670A CWE-22: Improper Limitation of a Pathname to a Restricted …7.8
• CVE-2022-41671A CWE-89: Improper Neutralization of Special Elements used i…7.8
• CVE-2022-41672In Apache Airflow, prior to version 2.4.1, deactivating a us…8.1
• CVE-2022-41675A remote attacker with general user privilege can inject mal…8
• CVE-2022-41676Raiden MAILD Mail Server website mail field has insufficient…5.4
• CVE-2022-41677An information disclosure vulnerability was discovered in Bo…5.3
• CVE-2022-41678Once an user is authenticated on Jolokia, he can potentially…8.8
• CVE-2022-41679Forma LMS version 3.1.0 and earlier are affected by an Cross…6.1
• CVE-2022-4168Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…