CVE-2022-47521: Buffer Overflow
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTRCHANNELLIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47521?
CVE-2022-47521 is classified as a high severity vulnerability that can lead to a heap-based buffer overflow.
How do I fix CVE-2022-47521?
To fix CVE-2022-47521, update to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which systems are affected by CVE-2022-47521?
CVE-2022-47521 affects the Linux kernel versions prior to 6.0.11, particularly in the WILC1000 wireless driver.
What can be impacted by the CVE-2022-47521 vulnerability?
CVE-2022-47521 can potentially allow an attacker to execute arbitrary code due to a buffer overflow in the affected systems.
Is CVE-2022-47521 exploitable remotely?
Yes, CVE-2022-47521 can be exploited remotely, allowing attackers to take control over vulnerable systems.