CVE-2022-3564

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2capreassemblesdu of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The...

PT-2022-5266

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to the function l2cap conn del in the file net/bluetooth/l2cap core.c of the Linux Kernel's Bluetooth component. It involves the use of memory after it has been free...

PT-2022-5280

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A critical vulnerability was found in the Linux Kernel, affecting the l2cap reassemble sdu function of the Bluetooth component. The issue is related to use after free, which can be...

PT-2025-38334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free vulnerability in the Bluetooth L2CAP implementation. The vulnerability occurs due to a flaw in handling channel destruction and can lead to a...

GSD-2022-1006312 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006232 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006128 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1005993 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005817 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005547 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34490 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. The actual impact and attack plausibility have not yet...

PT-2022-34386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v4.19.255 and fixed in versio...

PT-2022-34570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue is related to a regression in the l2cap global chan by psm function in the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven...

PT-2022-33805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.59 through 5.15.60 Description A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2022-34075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.136 Description: A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

GSD-2022-1005172 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33430 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.1 Description: The issue is related to a regression in the l2cap global chan by psm function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-25706: Out-of-bounds Read

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

ASB-A-230494481

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-3434 L2CAP: Stack based buffer overflow in le_ecred_conn_req()

Stack based buffer overflow in leecredconnreq. Zephyr versions = v2.5.0 Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm...