1588 matches found
PT-2022-36225
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description The issue concerns a problem with accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-36224 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.78 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...
PT-2022-36616
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.6 through 4.9.332 Description A use-after-free issue exists in the L2CAP component of the Bluetooth protocol. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-36428
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.224 Description The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-36071
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description The issue concerns accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-36359
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.6 through 5.10.153 Description A use-after-free issue was discovered in the L2CAP component of the Bluetooth protocol. This issue was introduced in version v3.6 and fixed in version v5.10.154. The actual impact and atta...
Important: kernel
Issue Overview: In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...
CVE-2022-3564
A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. Mitigati...
CLSA-2022-1670261781 Fix of 13 CVEs
CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...
PT-2024-11818
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2 Description The issue is related to a Bluetooth vulnerability in the Linux kernel, specifically an overflow in the L2CAP protocol. By continuously sending L2CAP CONF REQ packets, an attacker can cause t...
Linux kernel L2CAP Code Execution
The vulnerability of the l2capconnect and l2capleconnectreq functions net/bluetooth/l2capcore.c in Linux kernel systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
AZL-11518 CVE-2022-45934 affecting package kernel for versions less than 5.15.86.1-1
An issue was discovered in the Linux kernel through 6.0.10. l2capconfigreq in net/bluetooth/l2capcore.c has an integer wraparound via L2CAPCONFREQ packets...
Linux Kernel Input Validation Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.10 and earlier, which stems from integer wrapping via L2CAPCONFREQ in its net/bluetooth/l2capcore.c component...
CVE-2022-45934
An issue was discovered in the Linux kernel through 6.0.10. l2capconfigreq in net/bluetooth/l2capcore.c has an integer wraparound via L2CAPCONFREQ packets...
OESA-2022-2117 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit...
CVE-2022-42896
A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...
CVE-2022-42895
An information leak vulnerability was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capparseconfreq function. An attacker with physical access within the range of standard Bluetooth transmission could use thi...
DEBIAN-CVE-2022-42895
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e...
DEBIAN-CVE-2022-42896
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code execution and leaking kernel memory respectively remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via...
PT-2022-5813
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.10 Description The issue is related to an integer wraparound in the l2cap config req function in net/bluetooth/l2cap core.c, which can be exploited via L2CAP CONF REQ packets. This may allow an attacker to...