[USN-5708-1] backport-iwlwifi-dkms vulnerabilities

Severity Medium

Affected Packages 3

CVEs 5

Several security issues were fixed in backport-iwlwifi-dkms.

Sönke Huster discovered that an integer overflow vulnerability existed in
the WiFi driver stack in the Linux kernel, leading to a buffer overflow. A
physically proximate attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2022-41674)

Sönke Huster discovered that a use-after-free vulnerability existed in the
WiFi driver stack in the Linux kernel. A physically proximate attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-42719)

Sönke Huster discovered that the WiFi driver stack in the Linux kernel did
not properly perform reference counting in some situations, leading to a
use-after-free vulnerability. A physically proximate attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2022-42720)

Sönke Huster discovered that the WiFi driver stack in the Linux kernel did
not properly handle BSSID/SSID lists in some situations. A physically
proximate attacker could use this to cause a denial of service (infinite
loop). (CVE-2022-42721)

Sönke Huster discovered that the WiFi driver stack in the Linux kernel
contained a NULL pointer dereference vulnerability in certain situations. A
physically proximate attacker could use this to cause a denial of service
(system crash). This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.10.
(CVE-2022-42722)

Package	Affected Version
pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=kinetic	< 9904-0ubuntu3.1
pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=jammy	< 9858-0ubuntu3.1
pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=focal	< 8324-0ubuntu3~20.04.5

ID

USN-5708-1

Severity

medium

URL

https://ubuntu.com/security/notices/USN-5708-1

Published

2022-11-01T13:15:44
(22 months ago)

Modified

2022-11-01T13:15:44
(22 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=kinetic	ubuntu	backport-iwlwifi-dkms	< 9904-0ubuntu3.1	kinetic
Affected	pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=jammy	ubuntu	backport-iwlwifi-dkms	< 9858-0ubuntu3.1	jammy
Affected	pkg:deb/ubuntu/backport-iwlwifi-dkms?distro=focal	ubuntu	backport-iwlwifi-dkms	< 8324-0ubuntu3~20.04.5	focal

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date