CVE-2022-48971

MEDIUM EPSS 14.4%
Published Oct 21, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 21, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is not called to unregister it. This can cause panic if the argument "bluetooth-power" in text is freed and then another led_trigger_register() tries to access it: BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0 led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 13

VendorProductVersionRange
linuxlinux_kernel*≥4.9  –  <4.19.269
linuxlinux_kernel*≥4.20  –  <5.4.227
linuxlinux_kernel*≥5.5  –  <5.10.159
linuxlinux_kernel*≥5.11  –  <5.15.83
linuxlinux_kernel*≥5.16  –  <6.0.13
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/2c6cf0afc3856359e620e96edd952457d258e16c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2f3957c7eb4e07df944169a3e50a4d6790e1c744
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a66c3a94285552f6a8e45d73b34ebbad11d388b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7b950458156d410509a08c41930b75e72985938
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/edf7284a98296369dd0891a0457eec37df244873
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2c6cf0afc3856359e620e96edd952457d258e16c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2f3957c7eb4e07df944169a3e50a4d6790e1c744
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a66c3a94285552f6a8e45d73b34ebbad11d388b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7b950458156d410509a08c41930b75e72985938
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/edf7284a98296369dd0891a0457eec37df244873
    Patch