CVE-2022-41674: Debian Linux

High severity, CVSS 8.1. EPSS: 4.1% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Linux Linux Kernel: from 5.1, before 5.4.218 (fixed in 5.4.218); from 5.5, before 5.10.148 (fixed in 5.10.148); from 5.11, before 5.15.74 (fixed in 5.15.74); from 5.16, before 5.19.16 (fixed in 5.19.16); from 6.0, before 6.0.2 (fixed in 6.0.2)

Published 2022-10-14. Last modified 2026-06-17.