{"id":105304,"date":"2022-10-13T21:36:48","date_gmt":"2022-10-13T19:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda"},"modified":"2022-10-13T21:36:48","modified_gmt":"2022-10-13T19:36:48","slug":"uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","title":{"rendered":"Vulnerabilities in the Linux kernel's wireless stack that allow for remote code execution","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A series of vulnerabilities has been identified in the wireless stack (mac80211) of the Linux kernel, some of which potentially allow for buffer overflow and remote code execution through the transmission of specially crafted packets by an access point. A fix is currently available only in the form of a patch. <\/p>\n
Examples of frames causing the overflow have been published for demonstration of the attack possibility, along with a utility to inject these frames into the 802.11 wireless stack. The vulnerabilities are independent of the wireless drivers used. It is believed that the identified issues can be exploited to create working exploits for remote attacks on systems. <\/p>\n
\n
CVE-2022-41674 \u2014 buffer overflow in the function cfg80211_update_notlisted_nontrans, allowing overwriting up to 256 bytes in the heap. The vulnerability manifests starting from Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42719 \u2014 use-after-free in the MBSSID parsing code. The vulnerability manifests starting from Linux kernel 5.2 and can be exploited for remote code execution.\n
CVE-2022-42720 \u2014 use-after-free in the reference counting code in Basic Service Set (BSS) mode. The vulnerability manifests starting from Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42721 \u2014 corruption of the BSS list, leading to an infinite loop. The vulnerability manifests starting from Linux kernel 5.1 and can be exploited for denial of service.\n
CVE-2022-42722 \u2014 null pointer dereference in the beacon frame protection code. This issue can be exploited for denial of service. <\/ul>\n