Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49136

Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set hci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has been set as that means hci_unregister_dev has been called so it will likely cause a uaf after the timeout as the hdev will be freed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6a98e3836fa2077b169f10a35c2ca9952d53f987 to < 1c69ef84a808676cceb69210addf5df45b741323affected
  • 6a98e3836fa2077b169f10a35c2ca9952d53f987 to < 0b94f2651f56b9e4aa5f012b0d7eb57308c773cfaffected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 5.17.3 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References