CVE-2022-47518: Buffer Overflow
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47518?
CVE-2022-47518 has a medium severity rating due to the potential for a heap-based buffer overflow.
How do I fix CVE-2022-47518?
To address CVE-2022-47518, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2022-47518?
CVE-2022-47518 affects Linux kernel versions prior to 6.0.11 including versions 4.2 to 5.10.157 and 5.11 to 5.15.81.
Is CVE-2022-47518 specific to any Linux distributions?
Yes, CVE-2022-47518 impacts the Linux kernel across various distributions, including Debian 10.0.
What type of vulnerability is CVE-2022-47518?
CVE-2022-47518 is classified as a heap-based buffer overflow vulnerability within the WILC1000 wireless driver.