CVE-2022-49139

Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 26 Feb 2025, 01:55
Last modified:11 May 2026, 18:53

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.07% LOW
0% probability +0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2025, 01:55
Published
Vulnerability first disclosed
11 May 2026, 18:53
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, LE link type and a status that triggers the second case of the packet processing a NULL pointer dereference happens, as conn->link is NULL.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.07%• Percentile: 22%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ efc7688b557dd1be10eead7399b315efcb1dbc74, < 1c1291a84e94f6501644634c97544bb8291e9a1a | ≥ efc7688b557dd1be10eead7399b315efcb1dbc74, < 0f9db1209f59844839175b5b907d3778cafde93d | ≥ efc7688b557dd1be10eead7399b315efcb1dbc74, < c1aa0dd52db4ce888be0bd820c3fa918d350ca0b | ≥ efc7688b557dd1be10eead7399b315efcb1dbc74, < f61c23e73dc653b957781066abfa8105c3fa3f5b | ≥ efc7688b557dd1be10eead7399b315efcb1dbc74, < 3afee2118132e93e5f6fa636dfde86201a860ab3 | 2.6.30

  • linux•linux_kernel

    < 5.4.231 | ≥ 5.5, < 5.10.167 | ≥ 5.11, < 5.15.92 | ≥ 5.16, < 5.17.3

References (5)