Ubuntu 22.10: USN-5708-1 Critical Backport-Iwlwifi-Dkms Denial of Service

Several security issues were fixed in backport-iwlwifi-dkms.

Software Description:

- backport-iwlwifi-dkms: iwlwifi driver backport in DKMS format

Details:

Sönke Huster discovered that an integer overflow vulnerability existed in

the WiFi driver stack in the Linux kernel, leading to a buffer overflow. A

physically proximate attacker could use this to cause a denial of service

(system crash) or possibly execute arbitrary code. (CVE-2022-41674)

Sönke Huster discovered that a use-after-free vulnerability existed in the

WiFi driver stack in the Linux kernel. A physically proximate attacker

could use this to cause a denial of service (system crash) or possibly

execute arbitrary code. (CVE-2022-42719)

Sönke Huster discovered that the WiFi driver stack in the Linux kernel did

not properly perform reference counting in some situations, leading to a

use-after-free vulnerability. A physically proximate attacker could use

this to cause a denial of service (system ...