VDB
GHSA-3hfv-3383-4hvp
GHSA-3hfv-3383-4hvp
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published October 14, 2022
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.14 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Oct 14, 2022 CVE Published
- Apr 10, 2026 Distribution Patch
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3hfv-3383-4hvp
vulnetix vdb fixes GHSA-3hfv-3383-4hvpOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3hfv-3383-4hvp/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://bugzilla.suse.com/show_bug.cgi?id=1204051 url
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR url
- https://security.netapp.com/advisory/ntap-20230203-0008 url
- http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html url
- https://nvd.nist.gov/vuln/detail/CVE-2022-42719 advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=ff05d4b45dd89b922578dac497dcabf57cf771c6 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY url
- https://www.debian.org/security/2022/dsa-5257 url
- http://www.openwall.com/lists/oss-security/2022/10/13/2 url
- http://www.openwall.com/lists/oss-security/2022/10/13/5 url