medium5.5
CVE-2022-3564
A vulnerability classified as critical was found in Linux Kernel.
Impact
A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.6 before 4.9.333 from 4.10 before 4.14.299 from 4.15 before 4.19.265 from 4.20 before 5.4.224 from 5.5.0 before 5.10.154 from 5.11 before 5.15.78 |
| Debian | Debian Linux | Version 10.0 |
| Netapp | H300s Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H410s Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=89f9f3cb86b1c63badaf392a83dd661d56cc50b1
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
- https://security.netapp.com/advisory/ntap-20221223-0001/
- https://vuldb.com/?id.211087
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html