-

CVE-2022-50374

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure

syzbot is reporting NULL pointer dereference at hci_uart_tty_close() [1],
for rcu_sync_enter() is called without rcu_sync_init() due to
hci_uart_tty_open() ignoring percpu_init_rwsem() failure.

While we are at it, fix that hci_uart_register_device() ignores
percpu_init_rwsem() failure and hci_uart_unregister_device() does not
call percpu_free_rwsem().

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < d7cc0d51ffcbfd1caaa809fcf9cff05c46d0fb4d
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < b8917dce2134739b39bc0a5648b18427f2cad569
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 75b2c71ea581c7bb1303860d89366a42ad0506d2
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 98ce10f3f345e61fc6c83bff9cd11cda252b05ac
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version < 3124d320c22f3f4388d9ac5c8f37eaad0cefd6b1
Version 67d2f8781b9f00d1089aafcfa3dc09fcd0f343e2
Status affected
Version f6ec33f6bd3723a8146768106434ef6ab3d9d990
Status affected
Version 4a53c4e84ace1bc75157a7281af3fe8f5b19d08c
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 4.15
Status affected
Version < 4.15
Version 0
Status unaffected
Version <= 5.10.*
Version 5.10.150
Status unaffected
Version <= 5.15.*
Version 5.15.75
Status unaffected
Version <= 5.19.*
Version 5.19.17
Status unaffected
Version <= 6.0.*
Version 6.0.3
Status unaffected
Version <= *
Version 6.1
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.048
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string