CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

• CWE-835
• CWE-835

• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2022/10/13/5Exploit, Mailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204060Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=bcca852027e5878aec911a347407ecc88d6fff7fMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://security.netapp.com/advisory/ntap-20230203-0008/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory
• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2022/10/13/5Exploit, Mailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1204060Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=bcca852027e5878aec911a347407ecc88d6fff7fMailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://security.netapp.com/advisory/ntap-20230203-0008/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory

Published

Oct 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42716An issue was discovered in the Arm Mali GPU Kernel Driver. T…8.8
• CVE-2022-42717An issue was discovered in Hashicorp Packer before 2.3.1. Th…7.8
• CVE-2022-42718Incorrect default permissions in the installation folder for…7.8
• CVE-2022-42719A use-after-free in the mac80211 stack when parsing a multi-…8.8
• CVE-2022-4272A vulnerability, which was classified as critical, has been …9.8
• CVE-2022-42720Various refcounting bugs in the multi-BSS handling in the ma…7.8
• CVE-2022-42722In the Linux kernel 5.8 through 5.19.x before 5.19.16, local…5.5
• CVE-2022-42724app/Controller/UsersController.php in MISP before 2.4.164 al…4.3
• CVE-2022-42725Warpinator through 1.2.14 allows access outside of an intend…7.5
• CVE-2022-4273A vulnerability, which was classified as critical, has been …9.8
• CVE-2022-42731mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.…7.5
• CVE-2022-42732A vulnerability has been identified in syngo Dynamics (All v…7.5