vulnerability

Red Hat: CVE-2022-42720: kernel: use-after-free in bss_ref_get in net/wireless/scan.c (Multiple Advisories)

Name: Red Hat: CVE-2022-42720: kernel: use-after-free in bss_ref_get in net/wireless/scan.c (Multiple Advisories)
Creator: Red Hat
Published: 2022-10-14T00:00:00.000Z
Keywords: CVE, CWE-416, Red Hat, 2022, 42720, kernel, redhat-upgrade-kernel, redhat-upgrade-kernel-rt, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:A/AC:L/Au:S/C:C/I:N/A:C)

Published

Oct 14, 2022

Added

May 15, 2023

Modified

Jun 17, 2026

Description

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

CWE-416
EUVD-EUVD-2022-45786
NVD-CVE-2022-42720
REDHAT-RHSA-2023:2148
REDHAT-RHSA-2023:2458
REDHAT-RHSA-2023:2736
REDHAT-RHSA-2023:2951
REDHAT-RHSA-2024:1188
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-45786

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report