-

CVE-2022-50374

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure

syzbot is reporting NULL pointer dereference at hci_uart_tty_close() [1],
for rcu_sync_enter() is called without rcu_sync_init() due to
hci_uart_tty_open() ignoring percpu_init_rwsem() failure.

While we are at it, fix that hci_uart_register_device() ignores
percpu_init_rwsem() failure and hci_uart_unregister_device() does not
call percpu_free_rwsem().

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < d7cc0d51ffcbfd1caaa809fcf9cff05c46d0fb4d
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < b8917dce2134739b39bc0a5648b18427f2cad569
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 75b2c71ea581c7bb1303860d89366a42ad0506d2
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 98ce10f3f345e61fc6c83bff9cd11cda252b05ac
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 3124d320c22f3f4388d9ac5c8f37eaad0cefd6b1
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version f6ec33f6bd3723a8146768106434ef6ab3d9d990
Status affected
Version 4a53c4e84ace1bc75157a7281af3fe8f5b19d08c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.15
Status affected
Version < 4.15
Version 0
Status unaffected
Version <= 5.10.*
Version 5.10.150
Status unaffected
Version <= 5.15.*
Version 5.15.75
Status unaffected
Version <= 5.19.*
Version 5.19.17
Status unaffected
Version <= 6.0.*
Version 6.0.3
Status unaffected
Version <= *
Version 6.1
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.048
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String