CVE-2022-42719

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

CVSS 3.1

8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2022-10-13

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• fedoraproject:fedora
• linux:linux_kernel

References

• http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html
• http://www.openwall.com/lists/oss-security/2022/10/13/2
• http://www.openwall.com/lists/oss-security/2022/10/13/5
• https://bugzilla.suse.com/show_bug.cgi?id=1204051
• https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git/commit/?id=ff05d4b45dd89b922578dac497dcabf57cf771c6

Check your stackJSON