Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42524 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:20:00.333Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243401445References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42525 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T17:43:42.771Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509750References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42526 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:18:38.052Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509880References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42527 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:23:23.025Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244448906References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42528 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T15:02:23.744Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242203672References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-42529 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:21:50.121Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42530 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:17:32.019Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242331893References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42531 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:16:19.183Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231500967References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42532 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T19:13:11.816Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242332610References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42533 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T20:15:50.981Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-11-01
CVE ID: CVE-2022-42534 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:16:21.763Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237838301References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42535 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:13:25.242Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770183 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42536 State: PUBLISHED Published: 2023-11-29T21:29:46.076Z Last Updated: 2024-08-03T13:10:41.375Z Vendors: Google Products: Android Problem Types: Remote code execution Description: Remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42537 State: PUBLISHED Published: 2023-11-29T21:29:46.269Z Last Updated: 2024-08-03T13:10:41.245Z Vendors: Google Products: Android Problem Types: Remote code execution Description: Remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42538 State: PUBLISHED Published: 2023-11-29T21:29:46.455Z Last Updated: 2024-08-03T13:10:41.253Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: Elevation of privilege Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42539 State: PUBLISHED Published: 2023-11-29T21:29:46.662Z Last Updated: 2024-08-03T13:10:41.198Z Vendors: Google Products: Android Problem Types: Information disclosure Description: Information disclosure Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42540 State: PUBLISHED Published: 2023-11-29T21:29:46.883Z Last Updated: 2024-08-03T13:10:41.420Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: Elevation of privilege Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42541 State: PUBLISHED Published: 2023-11-29T21:29:47.079Z Last Updated: 2025-06-05T13:37:55.312Z Vendors: Google Products: Android Problem Types: Remote code execution Description: Remote code execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-07-01
CVE ID: CVE-2022-42542 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:11:15.778Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42543 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T18:06:09.409Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-249998113References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42544 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-17T16:04:54.177Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-0
E Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-42698 State: PUBLISHED Published: 2022-11-18T22:15:04.205Z Last Updated: 2025-02-20T19:50:59.315Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: API2Cart Products: Api2Cart Bridge Connector (WordPress plugin) Problem Types: CWE-434 Description: Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/api2cart-bridge-connector/#developers - https://patchstack.com/database/vulnerability/api2cart-bridge-connector/wordpress-api2cart-bridge-connector-plugin-1-1-0-arbitra
patchstack.com/database/vulnerability/api2cart-bridge-connector/wordpress-api2cart-bridge-connector-plugin-1-1-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2022-42699 State: PUBLISHED Published: 2022-12-06T22:00:55.421Z Last Updated: 2025-01-27T15:43:39.635Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WPecommerce, Alexanderfoxc Products: Easy WP SMTP Problem Types: CWE-94 Description: Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-wp-smtp/wordpress-easy-wp-smtp-plugin-1-5-1-auth-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2022-42700 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:05.350Z Description: No description available.
CVE ID: CVE-2022-42702 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:06.725Z Description: No description available.
CVE ID: CVE-2022-42703 State: PUBLISHED Published: 2022-10-09T00:00:00 Last Updated: 2024-08-03T13:10:41.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=2351 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 - https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b - https://googleprojectzero.blogs
inux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b - https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html
CVE ID: CVE-2022-42704 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-09T13:13:40.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141
CVE ID: CVE-2022-42705 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:25:05.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloads.asterisk.org/pub/security/AST-2022-008.html - https://lists.debian.org/debian-lts-annou
References: - https://downloads.asterisk.org/pub/security/AST-2022-008.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00029.html - https://www.debian.org/security/2023/dsa-5358
CVE ID: CVE-2022-42706 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:23:59.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloads.asterisk.org/pub/security/AST-2022-009.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00029.html - http
.asterisk.org/pub/security/AST-2022-009.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00029.html - https://www.debian.org/security/2023/dsa-5358
CVE ID: CVE-2022-42707 State: PUBLISHED Published: 2022-11-06T00:00:00.000Z Last Updated: 2025-05-02T18:41:04.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permission check under certain conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/mahara/+bug/1991157 - https://mahara.org/interaction/forum/topic.php?id=9199
CVE ID: CVE-2022-42710 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T14:39:51.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-42710/CVE-2022-42710.txt
CVE ID: CVE-2022-42711 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:01:45.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/ - https://www.progress.com/network-monitoring - https://community.progress.com/s/article/Product-Alert-Bulletin-October-2022
CVE ID: CVE-2022-42715 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T17:56:37.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://redcap.med.usc.edu/_shib/assets/ChangeLog_Standard.pdf - https://github.com/uclahs-secops/security-research/tree/main/reports/20221011-recap-xss
CVE ID: CVE-2022-42716 State: PUBLISHED Published: 2022-12-12T00:00:00 Last Updated: 2024-10-15T18:34:36.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities - http://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.html
CVE ID: CVE-2022-42717 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-05-20T14:12:42.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hashicorp/vagrant/pull/12910 - https://www.vagrantup.com/docs/synced-folders/nfs - https://discus
: - https://github.com/hashicorp/vagrant/pull/12910 - https://www.vagrantup.com/docs/synced-folders/nfs - https://discuss.hashicorp.com/t/hcsec-2022-23-vagrant-nfs-sudoers-configuration-allows-for-local-privilege-escalation/45423
CVE ID: CVE-2022-42718 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:11:46.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ni.com/en-us/support/documentation/supplemental/22/privilege-escalation-in-ni-labview-cli-.html
CVE ID: CVE-2022-42719 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T20:48:06.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1204051 - http://www.openwall.com/lists/oss-security/2022/10/13/2 - http://www.openwall.com/lists/oss-security/2022/10/13/5 - https://git.kernel.org/pub/scm/lin
oss-security/2022/10/13/2 - http://www.openwall.com/lists/oss-security/2022/10/13/5 - https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=ff05d4b45dd89b922578dac497dcabf57cf771c6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/ - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announc
FZNQS7YNGE56MT46VHMXL3DD2/ - https://www.debian.org/security/2022/dsa-5257 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - https://security.netapp.com/advisory/ntap-20230203-0008/ - http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html
CVE ID: CVE-2022-42720 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-15T20:47:12.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1204059 - http://www.openwall.com/lists/oss-security/2022/10/13/5 - https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/c