CVEvulnerability

CVE-2022-42895

6.5 MEDIUM Published 2022-11-23 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2022-11-23
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-824

Description

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

Affected configurations

• linux linux kernel

Related

Weakness · CWE (1)

  • CWE-824 Access of Uninitialized Pointer weakness

References