CVE-2022-49139

MEDIUM EPSS 15.3%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, LE link type and a status that triggers the second case of the packet processing a NULL pointer dereference happens, as conn->link is NULL.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel* <5.4.231
linuxlinux_kernel*≥5.5  –  <5.10.167
linuxlinux_kernel*≥5.11  –  <5.15.92
linuxlinux_kernel*≥5.16  –  <5.17.3

References 5

  • git.kernel.org https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b
    Patch