CVE-2022-3640

Exploit

EPSS 1.12%
Veröffentlicht 21.10.2022 15:15:09
Zuletzt bearbeitet 21.11.2024 07:19:56
Erkennungen
Login

Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 10

NVD 11 VulnDex Vulnerability Enrichment 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 4.9.326 < 4.9.333

Linux ≫ Linux Kernel Version >= 4.14.291 < 4.14.299

Linux ≫ Linux Kernel Version >= 4.19.255 < 4.19.265

Linux ≫ Linux Kernel Version >= 5.4.209 < 5.4.224

Linux ≫ Linux Kernel Version >= 5.10.135 < 5.10.154

Linux ≫ Linux Kernel Version >= 5.15.59 < 5.15.79

Linux ≫ Linux Kernel Version >= 5.18.16 < 6.0.8

Fedoraproject ≫ Fedora Version 35

Fedoraproject ≫ Fedora Version 36

Fedoraproject ≫ Fedora Version 37

Debian ≫ Debian Linux Version 10.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.12%	0.633

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cna@vuldb.com	5.5	2.1	3.4	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html

Third Party Advisory

Mailing List

https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=42cf46dea905a80f6de218e837ba4d4cc33d6979

Patch

Vendor Advisory

Exploit

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGOIRR72OAFE53XZRUDZDP7INGLIC3E3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD7VWUT7YAU4CJ247IF44NGVOAODAJGC/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XG2UPX3MQ7RKRJEUMGEH2TLPKZJCBU5C/

https://vuldb.com/?id.211944

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-3640

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-3640

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-3640

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-3640