All errata/p9/ALT-PU-2022-2891-1
ALT-PU-2022-2891-1

Package update kernel-image-std-def in branch p9

Version5.4.219-alt1
Task#308585
Published2022-10-20
Max severityHIGH
Severity:

Closed issues (2)

BDU:2022-06274
HIGH7.3

Уязвимость ядра операционных систем Linux, позволяющая нарушителю выполнить произвольный код

Published: 2022-10-18Modified: 2025-01-29
CVSS 3.xHIGH 7.3
CVSS:3.x/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0HIGH 7.1
CVSS:2.0/AV:A/AC:L/Au:S/C:C/I:N/A:C
References
CVE-2022-42719
HIGH8.8

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

Published: 2022-10-13Modified: 2025-05-15
CVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References