CVE-2022-23088: Freebsd

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

Affected products

• Freebsd Freebsd: before 12.3 (fixed in 12.3); from 12.4, before 13.0 (fixed in 13.0); version 12.3 only; version 13.0 only; version 13.1 only

Published 2024-02-15. Last modified 2026-06-17.