UBUNTU-CVE-2022-42896

Advisory lineage Upstream: 1 Downstream: 23
Upstream
CVE-2022-42896
Published: 23 Nov 2022, 15:15
Last modified:03 Jun 2026, 13:35

Vulnerability Summary

Overall Risk (default)
medium
35/100
CVSS Score
8.8 HIGH
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Nov 2022, 15:15
Published
Vulnerability first disclosed
03 Jun 2026, 13:35
Last Modified
Vulnerability information updated

Description

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit  https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

CVSS Metrics

  • v3.1•HIGH•Score: 8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • ubuntu•linux

    < 4.4.0-236.270 | < 4.15.0-202.213 | < 5.4.0-137.154 | < 5.15.0-58.64

  • ubuntu•linux-aws

    < 4.4.0-1115.121 | < 4.4.0-1153.168 | < 4.15.0-1148.160 | < 5.4.0-1094.102 | < 5.15.0-1028.32

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1028.32~20.04.1

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1094.102~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-fips

    < 4.15.0-2087.93 | all | < 5.4.0-1094.102+fips1

  • ubuntu•linux-aws-hwe

    < 4.15.0-1148.160~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1159.174~14.04.1 | < 4.15.0-1159.174~16.04.1 | all | < 5.4.0-1101.107 | < 5.15.0-1031.38

  • ubuntu•linux-azure-4.15

    < 4.15.0-1159.174

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1031.38~20.04.1

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1101.107~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    < 5.15.0-1031.38.1

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2068.74 | all | < 5.4.0-1101.107+fips1

  • ubuntu•linux-bluefield

    < 5.15.0-1014.16 | < 5.4.0-1058.64 | < 5.15.0-1014.16 | all

  • ubuntu•linux-dell300x

    < 4.15.0-1060.65

  • ubuntu•linux-fips

    < 4.4.0-1085.92 | all | < 4.15.0-1105.116 | < 5.4.0-1070.79

  • ubuntu•linux-gcp

    < 4.15.0-1143.159~16.04.1 | all | < 5.4.0-1098.107 | < 5.15.0-1027.34

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1143.159

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1027.34~20.04.1

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1098.107~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-6.2

    all

  • ubuntu•linux-gcp-fips

    < 4.15.0-2052.57 | all | < 5.4.0-1098.107+fips1

  • ubuntu•linux-gke

    < 5.4.0-1094.101 | < 5.15.0-1027.32

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.15

    < 5.15.0-1027.32~20.04.1

  • ubuntu•linux-gke-5.4

    all

  • ubuntu•linux-gkeop

    < 5.4.0-1062.66 | < 5.15.0-1013.17

  • ubuntu•linux-gkeop-5.15

    < 5.15.0-1013.17~20.04.1

  • ubuntu•linux-gkeop-5.4

    all

  • ubuntu•linux-hwe

    < 4.15.0-202.213~16.04.1 | all

  • ubuntu•linux-hwe-5.11

    all

  • ubuntu•linux-hwe-5.13

    all

  • ubuntu•linux-hwe-5.15

    < 5.15.0-58.64~20.04.1

  • ubuntu•linux-hwe-5.19

    < 5.19.0-32.33~22.04.1

Showing first 50 affected entries in server-rendered view.

References (27)