CVE-2022-49139
published 2025-02-26CVE-2022-49139: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
This event is just specified for SCO and eSCO link types.
On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR
of an existing LE connection, LE link type and a status that triggers the
second case of the packet processing a NULL pointer dereference happens,
as conn->link is NULL.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= efc7688b557dd1be10eead7399b315efcb1dbc74 < 1c1291a84e94f6501644634c97544bb8291e9a1a | 1c1291a84e94f6501644634c97544bb8291e9a1a |
| linux | linux | >= efc7688b557dd1be10eead7399b315efcb1dbc74 < 0f9db1209f59844839175b5b907d3778cafde93d | 0f9db1209f59844839175b5b907d3778cafde93d |
| linux | linux | >= efc7688b557dd1be10eead7399b315efcb1dbc74 < c1aa0dd52db4ce888be0bd820c3fa918d350ca0b | c1aa0dd52db4ce888be0bd820c3fa918d350ca0b |
| linux | linux | >= efc7688b557dd1be10eead7399b315efcb1dbc74 < f61c23e73dc653b957781066abfa8105c3fa3f5b | f61c23e73dc653b957781066abfa8105c3fa3f5b |
| linux | linux | >= efc7688b557dd1be10eead7399b315efcb1dbc74 < 3afee2118132e93e5f6fa636dfde86201a860ab3 | 3afee2118132e93e5f6fa636dfde86201a860ab3 |
| linux | linux_kernel | < 5.4.231 | 5.4.231 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 5.11 < 5.15.92 | 5.15.92 |
| linux | linux_kernel | >= 5.16 < 5.17.3 | 5.17.3 |
| linux | linux_kernel | >= 5.5 < 5.10.167 | 5.10.167 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-49139: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just spe
osv·2025-02-26·CVSS 5.5
CVE-2022-49139 [MEDIUM] CVE-2022-49139: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just spe
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, LE link type and a status that triggers the second case of the packet processing a NULL pointer dereference happens, as conn->link is NULL.
Red Hat
kernel: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49139 [MEDIUM] CWE-476 kernel: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
kernel: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
This event is just specified for SCO and eSCO link types.
On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR
of an existing LE connection, LE link type and a status that triggers the
second case of the packet processing a NULL pointer dereference happens,
as conn->link is NULL.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterp
Debian
CVE-2022-49139: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49139 [MEDIUM] CVE-2022-49139: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, LE link type and a status that triggers the second case of the packet processing a NULL pointer dereference happens, as conn->link is NULL.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93dhttps://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1ahttps://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0bhttps://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b
2025-02-26
Published