Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-3640
HistoryOct 21, 2022 - 12:00 a.m.

CVE-2022-3640

2022-10-2100:00:00
ubuntu.com
ubuntu.com
14

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.7%

JSON

A vulnerability, which was classified as critical, was found in Linux
Kernel. Affected is the function l2cap_conn_del of the file
net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation
leads to use after free. It is recommended to apply a patch to fix this
issue. The identifier of this vulnerability is VDB-211944.

Notes

Author Note
sbeattie fix is 42cf46dea9 (“Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()”) on the bluetooth-next tree.
rodrigo-zaiden USN-5975-1 first publication included esm/xenial linux-gcp version 4.15.0-1146.162~16.04.1 by mistake, please refer to USN-6007-1.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-206.217UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-139.156UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-60.66UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-31.32UNKNOWN
ubuntu23.10noarchlinux< anyUNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1151.164UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1096.104UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1030.34UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1019.20UNKNOWN
Rows per page:
1-10 of 961

References

Related

prion 1
openvas 29
cve 1
cnvd 1
fedora 3
nessus 46
debiancve 1
redhatcve 1
oraclelinux 4
redhat 12
ubuntu 20
osv 23
debian 2
suse 1
almalinux 3
ibm 3
prion
prion
Design/Logic Flaw
2022-10-21 15:15:00
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2022-7aadaadebc)
2022-11-15 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-64ab9153c0)
2022-11-15 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-65a0a3504a)
2022-11-15 00:00:00
cve
cve
CVE-2022-3640
2022-10-21 15:15:00
cnvd
cnvd
Linux kernel resource management error vulnerability (CNVD-2022-72086)
2022-10-25 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: kernel-6.0.8-300.fc37
2022-11-15 01:17:47
[SECURITY] Fedora 36 Update: kernel-6.0.8-200.fc36
2022-11-15 01:24:33
[SECURITY] Fedora 35 Update: kernel-6.0.8-100.fc35
2022-11-15 01:28:15
nessus
nessus
Fedora 36 : kernel (2022-64ab9153c0)
2022-12-22 00:00:00
Fedora 35 : kernel (2022-65a0a3504a)
2022-12-22 00:00:00
Ubuntu 22.10 : Linux kernel vulnerabilities (USN-5850-1)
2023-02-09 00:00:00
debiancve
debiancve
CVE-2022-3640
2022-10-21 15:15:00
redhatcve
redhatcve
CVE-2022-3640
2022-11-03 06:02:58
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2023-02-14 00:00:00
Unbreakable Enterprise kernel security update
2023-02-13 00:00:00
kernel security, bug fix, and enhancement update
2023-05-15 00:00:00
redhat
redhat
(RHSA-2024:2621) Important: kernel security, bug fix, and enhancement update
2024-04-30 16:31:58
(RHSA-2024:1877) Moderate: kernel security and bug fix update
2024-04-18 00:58:28
(RHSA-2024:2664) Important: OpenShift Container Platform 4.15.12 security update
2024-05-09 13:37:09
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-02-09 00:00:00
Linux kernel (Azure) vulnerabilities
2023-02-16 00:00:00
Linux kernel (Azure CVM) vulnerabilities
2023-03-02 00:00:00
osv
osv
linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-oracle-5.4 vulnerabilities
2023-02-15 20:03:17
linux, linux-aws, linux-azure, linux-azure-5.4, linux-gkeop, linux-kvm, linux-oracle, linux-raspi, linux-raspi-5.4 vulnerabilities
2023-02-09 18:26:39
linux-azure-fde vulnerabilities
2023-03-02 15:48:03
debian
debian
[SECURITY] [DLA 3244-1] linux-5.10 security update
2022-12-22 13:40:33
[SECURITY] [DLA 3245-1] linux security update
2022-12-23 22:17:29
suse
suse
Security update for the Linux Kernel (important)
2022-11-08 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2023-05-09 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-05-09 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-11-14 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel can affect IBM Spectrum Protect Plus
2024-03-20 18:36:29
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2023-12-18 18:02:34
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-05-09 12:31:16

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.7%

JSON
Related for UB:CVE-2022-3640
prion1openvas29cve1cnvd1fedora3nessus46debiancve1redhatcve1oraclelinux4redhat12ubuntu20osv23debian2suse1almalinux3ibm3