CVE-2022-50833 Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works

🗓️ 30 Dec 2025 12:10:54Reported by LinuxType

Bluetooth: use hdev workqueue for command and ncmd timers with read copy update protection to fix draining race.

Reporter	Title	Published	Views	Family All 287
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	30 Dec 202500:00	–	cnnvd
CVE	CVE-2022-50833	30 Dec 202512:10	–	cve
Debian CVE	CVE-2022-50833	30 Dec 202512:10	–	debiancve
EUVD	EUVD-2022-55865	30 Dec 202515:30	–	euvd
NVD	CVE-2022-50833	30 Dec 202513:15	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2026:0317-1)	2 Feb 202600:00	–	openvas
OSV	CVE-2022-50833 Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works	30 Dec 202512:10	–	osv
OSV	DEBIAN-CVE-2022-50833	30 Dec 202513:15	–	osv
OSV	RHSA-2023:2458 Red Hat Security Advisory: kernel security, bug fix, and enhancement update	16 Sep 202409:02	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bluetooth/hci_core.c",
      "net/bluetooth/hci_event.c"
    ],
    "versions": [
      {
        "version": "3b382555706558f5c0587862b6dc03e96a252bba",
        "lessThan": "c4635cf3d845a7324c25c52d549b70c8bd7ad4c7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "877afadad2dce8aae1f2aad8ce47e072d4f6165e",
        "lessThan": "3c6b036fe5c8ed8b6c4cbdc03605929882907ef0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "877afadad2dce8aae1f2aad8ce47e072d4f6165e",
        "lessThan": "deee93d13d385103205879a8a0915036ecd83261",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4bf367fa1fefabdf14938d0ac9ed60020389112e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.19.2",
        "lessThan": "5.19.15",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.18.18",
        "lessThan": "5.19",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bluetooth/hci_core.c",
      "net/bluetooth/hci_event.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.19.15",
        "lessThanOrEqual": "5.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.0.1",
        "lessThanOrEqual": "6.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/3c6b036fe5c8ed8b6c4cbdc03605929882907ef0
git	www.git.kernel.org/stable/c/deee93d13d385103205879a8a0915036ecd83261
git	www.git.kernel.org/stable/c/c4635cf3d845a7324c25c52d549b70c8bd7ad4c7

23 May 2026 15:25Current

EPSS0.00024