CVE-2022-42896

23.11.2022, 15:15

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth.A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim.

We recommend upgrading past commit  https://www.google.com/url  https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Google	CNA	8 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 51%

Vendor	Product	Version
linux	linux_kernel	𝑥 < 4.9.335
linux	linux_kernel	4.10 ≤ 𝑥 < 4.14.301
linux	linux_kernel	4.15 ≤ 𝑥 < 4.19.268
linux	linux_kernel	4.20 ≤ 𝑥 < 5.4.226
linux	linux_kernel	5.5 ≤ 𝑥 < 5.10.154
linux	linux_kernel	5.11 ≤ 𝑥 < 5.15.78
linux	linux_kernel	5.16 ≤ 𝑥 < 6.0.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

noble	not-affected
mantic	not-affected
lunar	Fixed 6.1.0-16.16 released
kinetic	Fixed 5.19.0-29.30 released
jammy	Fixed 5.15.0-58.64 released
focal	Fixed 5.4.0-137.154 released
bionic	Fixed 4.15.0-202.213 released
xenial	Fixed 4.4.0-236.270 released
trusty	not-affected

linux-allwinner

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-allwinner-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1017.18 released
jammy	Fixed 5.15.0-1028.32 released
focal	Fixed 5.4.0-1094.102 released
bionic	Fixed 4.15.0-1148.160 released
xenial	Fixed 4.4.0-1153.168 released
trusty	Fixed 4.4.0-1115.121 released

linux-aws-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1028.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1094.102~18.04.1 released
xenial	dne
trusty	dne

linux-aws-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	Fixed 4.15.0-1148.160~16.04.1 released
trusty	dne

linux-azure

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1017.18 released
jammy	Fixed 5.15.0-1031.38 released
focal	Fixed 5.4.0-1101.107 released
bionic	ignored
xenial	Fixed 4.15.0-1159.174~16.04.1 released
trusty	Fixed 4.15.0-1159.174~14.04.1 released

linux-azure-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1159.174 released
xenial	dne
trusty	dne

linux-azure-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1031.38~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1101.107~18.04.1 released
xenial	dne
trusty	dne

linux-azure-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-fde

kinetic	dne
jammy	Fixed 5.15.0-1031.38.1 released
focal	Fixed 5.4.0-1101.107 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1031.38~20.04.1.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-bluefield

kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1058.64 released
bionic	dne
xenial	dne
trusty	dne

linux-dell300x

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1060.65 released
xenial	dne
trusty	dne

linux-fips

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	ignored
trusty	ignored

linux-gcp

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-1027.34 released
focal	Fixed 5.4.0-1098.107 released
bionic	ignored
xenial	Fixed 4.15.0-1143.159~16.04.1 released
trusty	dne

linux-gcp-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1143.159 released
xenial	dne
trusty	dne

linux-gcp-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.34~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1098.107~18.04.1 released
xenial	dne
trusty	dne

linux-gcp-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gke

noble	not-affected
kinetic	dne
jammy	Fixed 5.15.0-1027.32 released
focal	Fixed 5.4.0-1094.101 released
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gke-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gkeop

kinetic	dne
jammy	Fixed 5.15.0-1013.17 released
focal	Fixed 5.4.0-1062.66 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1013.17~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	Fixed 4.15.0-202.213~16.04.1 released
trusty	dne

linux-hwe-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-58.64~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.19.0-32.33~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-137.154~18.04.1 released
xenial	dne
trusty	dne

linux-hwe-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-ibm

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-1023.26 released
focal	Fixed 5.4.0-1042.47 released
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.15

noble	dne
mantic	dne
lunar	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1042.47~18.04.1 released
xenial	dne
trusty	dne

linux-intel

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-intel-iot-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg

kinetic	dne
jammy	Fixed 5.15.0-1023.28 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1023.28~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-iot

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1011.13 released
bionic	dne
xenial	dne
trusty	dne

linux-kvm

noble	dne
mantic	dne
lunar	ignored
kinetic	Fixed 5.19.0-1016.17 released
jammy	Fixed 5.15.0-1026.31 released
focal	Fixed 5.4.0-1084.90 released
bionic	Fixed 4.15.0-1134.139 released
xenial	Fixed 4.4.0-1116.126 released
trusty	dne

linux-laptop

noble	dne
mantic	not-affected
lunar	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-58.64 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-58.64~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-236.270~14.04.1 released

linux-nvidia

noble	not-affected
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.15.0-1017.17 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-lowlatency

noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-oem-5.10

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.14

kinetic	dne
jammy	dne
focal	Fixed 5.14.0-1056.63 released
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.17

noble	dne
mantic	dne
lunar	dne
kinetic	ignored
jammy	Fixed 5.17.0-1025.26 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 6.0.0-1012.12 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.1

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.8

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.17 released
jammy	Fixed 5.15.0-1027.33 released
focal	Fixed 5.4.0-1092.101 released
bionic	Fixed 4.15.0-1113.124 released
xenial	Fixed 4.15.0-1113.124~16.04.1 released
trusty	dne

linux-oracle-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.33~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1092.101~18.04.1 released
xenial	dne
trusty	dne

linux-oracle-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1012.19 released
jammy	Fixed 5.15.0-1023.25 released
focal	Fixed 5.4.0-1079.90 released
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1079.90~18.04.1 released
xenial	dne
trusty	dne

linux-raspi-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi2

kinetic	dne
jammy	dne
focal	ignored
bionic	Fixed 4.15.0-1126.134 released
xenial	ignored
trusty	dne

linux-raspi2-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-realtime

noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1012.13 released
jammy	ignored
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1028.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1144.154 released
xenial	ignored
trusty	dne

linux-starfive

noble	dne
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-xilinx-zynqmp

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	Fixed 5.4.0-1021.25 released
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-416 - Use After Free
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

References

https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4

https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4

https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4

https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4