CVE-2022-42895
Aliases:UBUNTU-CVE-2022-42895DEBIAN-CVE-2022-42895CGA-25wc-vgx7-xpfmCGA-2ff4-27gr-h77pCGA-2hxc-5ch6-24vqCGA-2jxh-5fjq-r72rCGA-2m2g-m379-p3frCGA-2phq-prxc-5mfgCGA-2rf3-mwp2-4988CGA-2rpr-f3fq-m66jCGA-2xfq-fc5f-pcgwCGA-3m2v-h922-v4p5CGA-3p37-p6hg-vrfjCGA-3x7x-wx87-xjxxCGA-4269-3rcm-68xfCGA-4374-r9p2-xh7wCGA-44x2-r68g-r7jmCGA-46wp-f2mq-rwm7CGA-4pf4-9c44-v36rCGA-4r82-x6hv-g8h5CGA-53fc-92x7-w75jCGA-54x3-x92v-frx4CGA-55r2-72r4-37wvCGA-5frj-g97f-7653CGA-5x94-49q8-jmhwCGA-6396-q59q-5gm3CGA-63vr-p892-4p5rCGA-65fw-f482-pv4gCGA-66fv-ffh2-7m62CGA-6c2p-3v95-9g73CGA-6h8h-qqjj-rv7wCGA-6h8w-m5gv-xgqjCGA-6m9q-vhj5-jrq2CGA-6mw9-6whv-5vf3CGA-6p22-7g48-rvfjCGA-6x5j-g5pp-p47pCGA-7577-35cw-xg7jCGA-75gc-7fr7-48g7CGA-75x2-76p4-hxq8CGA-75x3-qc24-h2pjCGA-7hqg-hj2q-9wf4CGA-7wgg-4hf4-hfxrCGA-8826-q4pg-32f7CGA-8hq5-98g4-3fvwCGA-8hqx-97jj-p963CGA-8jxr-643h-2wf3CGA-8qfv-hwwm-h369CGA-96jq-w59q-j72qCGA-9hfr-25fh-5mc7CGA-9m85-9qr2-4v7pCGA-9x75-r69m-xcv3CGA-c834-r43j-7qgqCGA-cffv-mpj8-p84jCGA-cwv4-hfqf-xf6xCGA-f3gp-r5mp-v874CGA-f4fg-r6xr-v244CGA-fgx9-ghgp-wqhjCGA-fm24-x99r-p95vCGA-fq43-mwhm-9qv5CGA-g558-53m2-qv2wCGA-g6r7-xg45-rmm3CGA-g8p6-r5gp-vgwrCGA-g8w6-m5fv-m27pCGA-g99r-x38v-25h7CGA-gc33-9cr9-3m6gCGA-gvjq-pr23-mqc2CGA-gwp9-3c2w-4mqvCGA-hqwp-2jf3-jgggCGA-j5rm-qfw3-3c67CGA-j9qv-gg94-vm52CGA-jp7g-pm7m-jrcqCGA-jrpg-p97p-35wfCGA-jxh2-77h6-q83hCGA-m7fh-rwpx-x8grCGA-m9j4-cghv-7fc7CGA-mp4x-w54p-8hv2CGA-mvc8-cr67-73fqCGA-mx22-p2px-hqhfCGA-ph22-w94c-24gcCGA-q234-v962-cx3rCGA-q27r-5438-qv6hCGA-q3c4-6p86-p5rfCGA-q76m-p3xr-99jvCGA-q996-6h92-743jCGA-qfj2-xv29-8pcrCGA-qgmw-pmh5-438xCGA-qmcf-2jwm-x5j6CGA-qr95-gxmm-56fcCGA-qvh6-5pjh-364pCGA-r4r6-9g2c-83c5CGA-r765-cx8f-9jjpCGA-rj65-8pr7-483qCGA-rjxq-jqf8-rrw4CGA-rpvj-78gf-cpcwCGA-rq4p-6hcm-gjp6CGA-rqxm-x8hx-h796CGA-rrvg-wp8w-p9cfCGA-rw27-7xwg-j95xCGA-rxv9-hph2-4xf6CGA-v3mv-8pqp-5w2pCGA-v4c6-9q5p-xvhmCGA-v75x-2w78-wj4vCGA-vc65-mj7j-g75vCGA-vfm7-98fg-mxw2CGA-vfmh-mjq6-wrcqCGA-vfvr-523q-m4x9CGA-vfx3-p97f-v97pCGA-vghf-xf7r-8q8pCGA-vm3f-rw9g-6c3rCGA-w35p-4qv3-ph2wCGA-w3g8-g54f-mqw8CGA-wg78-3c88-63qvCGA-whcm-pw3w-xv8vCGA-wv2q-jpf9-rwqfCGA-x2x5-fjw2-rh57CGA-x74w-jq7m-c9f9CGA-xrg9-vvxj-hfv5CGA-xxmq-7224-qx39CGA-fvmc-q74q-66vxCGA-rjq4-j7v7-6x93CGA-23xr-gwvx-7fw2CGA-3gcf-4wrf-2q98CGA-755f-m3jv-v5m6CGA-7p52-wfq7-pwxfCGA-8v9j-987j-x5w5CGA-gjmm-82vw-852gCGA-j3gw-jxcv-x7gwCGA-m3j5-fxhg-x9xmCGA-r4jw-2v5p-chc3CGA-rwxx-wwr2-rch8CGA-vh5w-cmvf-fwmmCGA-vrhq-qpgr-xq37CGA-xjvf-hw2x-8rx9CGA-755c-96v6-c4f3CGA-8mmj-jvg8-4hw8CGA-296c-75jw-47v7CGA-5mj5-6h5m-5rwhCGA-rwp2-38gx-3235CGA-wrg2-7753-w32mCGA-x897-6xh7-v48rCGA-m4q3-6g5g-xc7gCGA-73c8-3x5m-v295CGA-cjp2-jjc5-2fqrCGA-j6hr-jc4g-chfq
Advisory lineage Upstream: 0 Downstream: 48
Modified
Published: 23 Nov 2022, 14:11
Last modified:21 Apr 2025, 13:46
Vulnerability Summary
Overall Risk (default)
medium
26/100 CVSS Score
6.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.41% LOW
0% probability +0.34%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
23 Nov 2022, 14:11
Published
Vulnerability first disclosed
21 Apr 2025, 13:46
Last Modified
Vulnerability information updated
Description
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url
CVSS Metrics
- v3.1•MEDIUM•Score: 5.1CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Trends
Current EPSS score: 0.41%• Percentile: 35%
Techniques & Countermeasures
- CWE-824•Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 6.12.65-r1 | < 0
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 0 | < 6.18.5-r0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0 | < 0
Showing first 50 affected entries in server-rendered view.
References (32)
- https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
- https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e
- https://ubuntu.com/security/CVE-2022-42895
- https://git.kernel.org/linus/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
- https://github.com/google/security-research/security/advisories/GHSA-vccx-8h74-2357
- https://ubuntu.com/security/notices/USN-5780-1
- https://ubuntu.com/security/notices/USN-5850-1
- https://ubuntu.com/security/notices/USN-5851-1
- https://ubuntu.com/security/notices/USN-5853-1
- https://ubuntu.com/security/notices/USN-5858-1
- https://ubuntu.com/security/notices/USN-5859-1
- https://ubuntu.com/security/notices/USN-5860-1
- https://ubuntu.com/security/notices/USN-5874-1
- https://ubuntu.com/security/notices/USN-5875-1
- https://ubuntu.com/security/notices/USN-5876-1
- https://ubuntu.com/security/notices/USN-5877-1
- https://ubuntu.com/security/notices/USN-5878-1
- https://ubuntu.com/security/notices/USN-5879-1
- https://ubuntu.com/security/notices/USN-5883-1
- https://ubuntu.com/security/notices/USN-5884-1
- https://ubuntu.com/security/notices/USN-5909-1
- https://ubuntu.com/security/notices/USN-5918-1
- https://ubuntu.com/security/notices/USN-5919-1
- https://ubuntu.com/security/notices/USN-5920-1
- https://ubuntu.com/security/notices/USN-5924-1
- https://ubuntu.com/security/notices/USN-5925-1
- https://ubuntu.com/security/notices/USN-5926-1
- https://ubuntu.com/security/notices/USN-5927-1
- https://ubuntu.com/security/notices/USN-5975-1
- https://ubuntu.com/security/notices/USN-6007-1
- https://www.cve.org/CVERecord?id=CVE-2022-42895
- https://security-tracker.debian.org/tracker/CVE-2022-42895