Vulnerabilities > Linux > Linux Kernel > 5.18.14

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-3543 Memory Leak vulnerability in Linux Kernel
A vulnerability, which was classified as problematic, has been found in Linux Kernel.
local
low complexity
linux CWE-401
5.5
2022-10-16 CVE-2022-3521 Race Condition vulnerability in multiple products
A vulnerability has been found in Linux Kernel and classified as problematic.
local
high complexity
linux debian CWE-362
2.5
2022-10-14 CVE-2022-41674 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.19.16.
8.1
2022-10-14 CVE-2022-42720 Use After Free vulnerability in multiple products
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.
local
low complexity
linux fedoraproject debian CWE-416
7.8
2022-10-14 CVE-2022-42721 Infinite Loop vulnerability in multiple products
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
local
low complexity
linux fedoraproject debian CWE-835
5.5
2022-10-14 CVE-2022-42722 NULL Pointer Dereference vulnerability in multiple products
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.
local
low complexity
linux fedoraproject debian CWE-476
5.5
2022-10-13 CVE-2022-42719 Use After Free vulnerability in multiple products
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
8.8
2022-10-09 CVE-2022-42703 Use After Free vulnerability in Linux Kernel
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
local
low complexity
linux CWE-416
5.5
2022-09-30 CVE-2022-41848 Use After Free vulnerability in Linux Kernel
drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl, aka a race condition between mgslpc_ioctl and mgslpc_detach.
high complexity
linux CWE-416
4.2
2022-09-30 CVE-2022-41849 Use After Free vulnerability in multiple products
drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect.
high complexity
linux debian CWE-416
4.2