8.0
High
CVE-2022-42896 There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and…
Description
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel 3.0 | 3.0.0 → latest | No fix stated |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1 | 1.1 |
References
- github.com github.com
- kernel.dance kernel.dance
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 43 CVEs of Linux Kernel →
CVE-2024-24864
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function
5.3
Medium
CVE-2024-24857
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
4.6
Medium
CVE-2024-24858
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
4.6
Medium
CVE-2024-24859
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function
4.6
Medium