What’s Vulnerable › Vulnerabilities

CVE-2022-47518

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-18 · updated 2026-10-14
• Weakness: CWE-787

Description

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.

Affected products

• Debian Linux: 10.0
• Linux kernel: from 4.2 before 5.10.157; from 5.11 before 5.15.81; from 5.16 before 6.0.11 — fixed in 5.10.157, 5.15.81, 6.0.11
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 5.10.157, 5.15.81, 6.0.11. Check the vendor advisory for mitigations.

References

• https://github.com/torvalds/linux/commit/0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
• https://lore.kernel.org/r/20221123153543.8568-5-philipturnbull%40github.com
• https://security.netapp.com/advisory/ntap-20230113-0007/
• https://github.com/torvalds/linux/commit/0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
• https://lore.kernel.org/r/20221123153543.8568-5-philipturnbull%40github.com
• https://security.netapp.com/advisory/ntap-20230113-0007/
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Get alerted when CVE-2022-47518 or the next vulnerability affects your stack