CVE-2022-47518

Summary

CVE	CVE-2022-47518
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-12-18 06:15:09 UTC
Updated	2026-10-14 19:16:55 UTC
Description	An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.

Primary CVSS: v3.1 7.8 HIGH from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-787 | n/a | CWE-787 CWE-787 Out-of-bounds Write

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	ADP	DECLARED	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified
ADP	Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem	affected V1.1 custom	Not specified

Reference	Source	Link	Tags
[PATCH 4/4] wifi: wilc1000: validate number of channels - Phil Turnbull	af854a3a-2127-422b-91ae-364da2661108	lore.kernel.org
December 2022 Linux Kernel 6.0.11 Vulnerabilities in NetApp Products \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com	Third Party Advisory
[SECURITY] [DLA 3244-1] linux-5.10 security update	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org	Mailing List, Third Party Advisory
wifi: wilc1000: validate number of channels · torvalds/linux@0cdfa9e · GitHub	af854a3a-2127-422b-91ae-364da2661108	github.com	Patch, Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-794697.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
[PATCH 4/4] wifi: wilc1000: validate number of channels - Phil Turnbull	MITRE	lore.kernel.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

181433 Debian Security Update for linux (CVE-2022-47518)
181440 Debian Security Update for linux-5.10 (DLA 3244-1)
199209 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5912-1)
199211 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5911-1)
199220 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5929-1)
199223 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5935-1)
199227 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5938-1)
199229 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5941-1)
199238 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5950-1)
199243 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-5962-1)
378468 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-20230042)
378512 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0042)
904730 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11866)
904733 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11856)
905188 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11866-1)
905756 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11866-2)
906335 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11856-2)