CVE-2022-47520: High severity linux kernel vulnerability
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47520?
CVE-2022-47520 is classified as a medium severity vulnerability due to the potential for out-of-bounds reads in the Linux kernel.
How do I fix CVE-2022-47520?
To fix CVE-2022-47520, upgrade to the Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2022-47520?
CVE-2022-47520 affects the Linux kernel versions before 6.0.11, specifically between versions 4.2.0 and 5.15.81.
What types of software are impacted by CVE-2022-47520?
CVE-2022-47520 impacts various distributions of the Linux kernel, including Debian Linux 10.0 and several NetApp firmware versions.
What vulnerabilities can be triggered by CVE-2022-47520?
CVE-2022-47520 can trigger out-of-bounds reads when parsing RSN information elements from Netlink packets.