Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-49202

Bluetooth: hci_uart: add missing NULL check in h5_enqueue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection fault in __pm_runtime_resume(). The problem was in missing NULL check. hu->serdev can be NULL and we should not blindly pass &serdev->dev somewhere, since it will cause GPF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d9dd833cf6d29695682ec7e7924c0d0992b906bc to < 7235485433d290367d60ae22fcdfc565e61d42abaffected
  • d9dd833cf6d29695682ec7e7924c0d0992b906bc to < e6b6c904c0f88588b6a3ace20e4c0d61eab124f8affected
  • d9dd833cf6d29695682ec7e7924c0d0992b906bc to < 8a3896c30f542439d36303183dc96f65df8cc528affected
  • d9dd833cf6d29695682ec7e7924c0d0992b906bc to < 32cb08e958696908a9aad5e49a78d74f7e32fffbaffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.33 to ≤ 5.15.*unaffected
  • 5.16.19 to ≤ 5.16.*unaffected
  • 5.17.2 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References