Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2022-42895

Info Leak in l2cap_core in the Linux Kernel

Description

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux Kernel

Default version status: unaffected

  • 3.0.0 to ≤ b1a2cd50c0357f243b7435a732b4e62ba3157a2eaffected

References