What’s Vulnerable › Vulnerabilities

CVE-2022-47521

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-18 · updated 2026-06-17
• Weakness: CWE-787

Description

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.

Affected products

• Debian Linux: 10.0
• Linux kernel: from 5.7 before 5.10.157; from 5.11 before 5.15.81; from 5.16 before 6.0.11 — fixed in 5.10.157, 5.15.81, 6.0.11
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 5.10.157, 5.15.81, 6.0.11. Check the vendor advisory for mitigations.

References

• https://github.com/torvalds/linux/commit/f9b62f9843c7b0afdaecabbcebf1dbba18599408
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
• https://lore.kernel.org/r/20221123153543.8568-4-philipturnbull%40github.com
• https://security.netapp.com/advisory/ntap-20230113-0007/
• https://github.com/torvalds/linux/commit/f9b62f9843c7b0afdaecabbcebf1dbba18599408
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
• https://lore.kernel.org/r/20221123153543.8568-4-philipturnbull%40github.com
• https://security.netapp.com/advisory/ntap-20230113-0007/

Get alerted when CVE-2022-47521 or the next vulnerability affects your stack