NetSight
IP …
medium5.5

CVE-2022-3640

A vulnerability, which was classified as critical, was found in Linux Kernel.

Impact

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9.326 before 4.9.333
from 4.14.291 before 4.14.299
from 4.19.255 before 4.19.265
from 5.4.209 before 5.4.224
from 5.10.135 before 5.10.154
from 5.15.59 before 5.15.79
FedoraprojectFedora
Versions 35, 36, 37
DebianDebian Linux
Version 10.0

Weakness classification

CWE-119CWE-416

References