Critical Bluetooth Command Queueing Vulnerability in Linux Packages
Summary
CVE-2022-49136: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set hci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has been set as tha... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and support for a wide range of hardware. However, vulnerabilities can arise, impacting system security and functionality. This specific vulnerability affects the Bluetooth subsystem, which is responsible for managing Bluetooth devices and connections.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Bluetooth command queuing process. The issue arises when the HCI_UNREGISTER flag is set, indicating that the Bluetooth device has been unregistered. The function hci_cmd_sync_queue fails to return an error in this state, leading to a potential use-after-free (uaf) condition after a timeout. This could allow an attacker to exploit the freed memory, potentially leading to system crashes or arbitrary code execution.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
The CVE-2022-49136 vulnerability in the Linux kernel's Bluetooth subsystem poses a significant risk due to its potential for exploitation. Users are strongly advised to update their systems to the latest patched versions to ensure security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49136 is a vulnerability in the Linux kernel's Bluetooth subsystem that can lead to a use-after-free condition.
If exploited, this vulnerability could allow an attacker to execute arbitrary code or crash the system, compromising its security.
Versions of the Linux kernel prior to 5.17.3-1 are affected. Check your kernel version using 'uname -r'.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
