CVE-2022-3564
גבוהה 7.1
תיאור (מקור, אנגלית)
A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.
מדדים
- CVSS 3.1
-
7.1 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-19/10/2026
- CWE
- CWE-119, CWE-362
מוצרים מושפעים
linux: linux kernel; debian: debian linux; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s
קישורים
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/c… Patch
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/c… Patch
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20221223-0001/ Third Party Advisory
- https://vuldb.com/?id.211087 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20221223-0001/ Third Party Advisory
- https://vuldb.com/?id.211087 Third Party Advisory