CVE-2022-49139

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49139
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, LE link type and a status that triggers the second case of the packet processing a NULL pointer dereference happens, as conn->link is NULL.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d Patch
https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a Patch
https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3 Patch
https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b Patch
https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:30

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d - () https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d - Patch
References () https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a - () https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a - Patch
References () https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3 - () https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3 - Patch
References () https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b - () https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b - Patch
References () https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b - () https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: corrección de la desreferencia de puntero nulo en hci_sync_conn_complete_evt Este evento solo se especifica para los tipos de enlace SCO y eSCO. Al recibir un HCI_Synchronous_Connection_Complete para una BDADDR de una conexión LE existente, un tipo de enlace LE y un estado que activa el segundo caso del procesamiento de paquetes, se produce una desreferencia de puntero NULL, ya que conn->link es NULL.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:30

NVD link : CVE-2022-49139

Mitre link : CVE-2022-49139

CVE.ORG link : CVE-2022-49139

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference