GSD-2022-1007815 Bluetooth: L2CAP: Fix attempting to access uninitialized memory

Bluetooth: L2CAP: Fix attempting to access uninitialized memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.333 Description The issue is related to a use-after-free in the l2cap conn del function. This problem was introduced in version v4.9.326 and is fixed in version v4.9.333. The actual impact and attack...

PT-2022-36341

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.154 Description The issue concerns accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36071

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description The issue concerns accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-36243

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description A memory leak issue was discovered in the L2CAP component of the Bluetooth functionality. The issue was introduced in version v5.12 and is fixed in version v5.15.78. The actual impact and...

PT-2022-36569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.291 through 4.14.298 Description A use-after-free issue exists in the l2cap conn del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.14.291...

PT-2022-36563 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: The issue is related to the Bluetooth L2CAP protocol in the Linux Kernel. It involves attempting to access uninitialized memory, which may have potential security implications. However, th...

PT-2022-36096 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A memory leak issue was discovered in the L2CAP component of the Bluetooth protocol. The issue is related to the vhci write function. The actual impact and attack plausibility have not yet be...

PT-2022-36512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36442 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 5.4.223 Description: A use-after-free issue was discovered in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. This issue is related to the l2cap reassemble sdu...

PT-2022-36358 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.153 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-36499 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36098

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description The issue is related to a use-after-free error in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. This error was introduced in version v3.6 and is...

PT-2022-36359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.6 through 5.10.153 Description A use-after-free issue was discovered in the L2CAP component of the Bluetooth protocol. This issue was introduced in version v3.6 and fixed in version v5.10.154. The actual impact and atta...

PT-2022-36570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.299 Description A use-after-free issue was discovered in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. This issue is related to the l2cap reassemble sdu functio...

PT-2022-36070 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description The issue concerns a problem with accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-36224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.78 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-36616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.6 through 4.9.332 Description A use-after-free issue exists in the L2CAP component of the Bluetooth protocol. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-36428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.224 Description The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...