VDB

ALPINE-CVE-2022-42719

ALPINE-CVE-2022-42719 PUBLISHED CVSS 8.800000190734863 HIGH

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.19linux-lts5.4.82-r0, 5.10.11-r0, 0
Alpine:v3.17linux-lts5.10.10-r1, 5.4.82-r0, 5.4.81-r0
Alpine:v3.23linux-lts5.10.0-r0, 5.10.70-r0, 5.10.7-r0
Alpine:v3.15linux-lts5.10.0-r0, 5.10.1-r1, 5.10.11-r0
Alpine:v3.16linux-lts5.4.4-r1, 5.10.4-r0, 0
Alpine:v3.22linux-lts5.4.82-r0, 5.10.70-r0, 5.15.34-r0
Alpine:v3.18linux-lts5.15.28-r0, 0, 5.10.0-r0
Alpine:v3.21linux-lts5.4.82-r0, 5.4.72-r0, 0
Alpine:v3.20linux-lts5.10.1-r0, 0, 5.10.0-r0

Timeline

  • Oct 13, 2022 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›