GSD-2022-1007841 Bluetooth: L2CAP: Fix memory leak in vhci_write

Bluetooth: L2CAP: Fix memory leak in vhciwrite This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007816 Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM

Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007815 Bluetooth: L2CAP: Fix attempting to access uninitialized memory

Bluetooth: L2CAP: Fix attempting to access uninitialized memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.78 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-36096 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A memory leak issue was discovered in the L2CAP component of the Bluetooth protocol. The issue is related to the vhci write function. The actual impact and attack plausibility have not yet be...

PT-2022-36358 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.153 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-36512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36070 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36499 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36442 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 5.4.223 Description: A use-after-free issue was discovered in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. This issue is related to the l2cap reassemble sdu...

PT-2022-36563 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: The issue is related to the Bluetooth L2CAP protocol in the Linux Kernel. It involves attempting to access uninitialized memory, which may have potential security implications. However, th...

Important: kernel

Issue Overview: In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

CVE-2022-3564

A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or potentially escalate privileges. Mitigati...

CLSA-2022-1670261781 Fix of 13 CVEs

CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...

Vulnerability of the l2cap_connect and l2cap_le_connect_req functions (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a hacker to execute arbitrary code

The vulnerability of the l2capconnect and l2capleconnectreq functions net/bluetooth/l2capcore.c in Linux kernel systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

AZL-11518 CVE-2022-45934 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 6.0.10. l2capconfigreq in net/bluetooth/l2capcore.c has an integer wraparound via L2CAPCONFREQ packets...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.10 and earlier, which stems from integer wrapping via L2CAPCONFREQ in its net/bluetooth/l2capcore.c component...

CVE-2022-45934

An issue was discovered in the Linux kernel through 6.0.10. l2capconfigreq in net/bluetooth/l2capcore.c has an integer wraparound via L2CAPCONFREQ packets...

OESA-2022-2117 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit...

CVE-2022-42896

A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...