---
id: CVE-2022-42721
title: >-
  A list management bug in BSS handling in the mac80211 stack in the Linux
  kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers
  (able to inject WLAN frames) to corrupt a linked list and, in turn,
  potentially execute code.
summary: >-
  A list management bug in BSS handling in the mac80211 stack in the Linux
  kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers
  (able to inject WLAN frames) to corrupt a linked list and, in turn,
  potentially execute code.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-835
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.1, < 5.19.16'
  - fedora = 35
  - fedora = 36
  - fedora = 37
  - debian_linux = 10.0
  - debian_linux = 11.0
patched:
  - linux_kernel 5.19.16
published: '2022-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:16:51.797'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-42721'
references:
  - url: >-
      http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html
    label: cve@mitre.org
  - url: 'http://www.openwall.com/lists/oss-security/2022/10/13/5'
    label: cve@mitre.org
  - url: 'https://bugzilla.suse.com/show_bug.cgi?id=1204060'
    label: cve@mitre.org
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=bcca852027e5878aec911a347407ecc88d6fff7f
    label: cve@mitre.org
  - url: 'https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html'
    label: cve@mitre.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
    label: cve@mitre.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
    label: cve@mitre.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
    label: cve@mitre.org
  - url: 'https://security.netapp.com/advisory/ntap-20230203-0008/'
    label: cve@mitre.org
  - url: 'https://www.debian.org/security/2022/dsa-5257'
    label: cve@mitre.org
  - url: >-
      http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.openwall.com/lists/oss-security/2022/10/13/5'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://bugzilla.suse.com/show_bug.cgi?id=1204060'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=bcca852027e5878aec911a347407ecc88d6fff7f
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20230203-0008/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2022/dsa-5257'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00645
epssPercentile: 0.50718
ingestedAt: '2026-10-14T19:49:57.521Z'
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-05-15T20:44:52.693900Z'
---

## Overview

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

## Affected

- `linux_kernel >= 5.1, < 5.19.16`
- `fedora = 35`
- `fedora = 36`
- `fedora = 37`
- `debian_linux = 10.0`
- `debian_linux = 11.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.19.16`