Critical NULL Pointer Dereference in Linux Kernel Bluetooth Module
Summary
CVE-2022-49202: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection fault in __pm_runtime_resume(). Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including process management, memory management, and device control. The Bluetooth module within the kernel facilitates wireless communication between devices. This vulnerability specifically affects the hci_uart component, which is responsible for Bluetooth communication over UART interfaces, making it crucial for devices relying on Bluetooth connectivity.
Vulnerability Detail
The vulnerability identified as CVE-2022-49202 arises from a missing NULL check in the h5_enqueue function of the Bluetooth hci_uart module. This oversight can lead to a general protection fault (GPF) when the hu->serdev pointer is NULL. If the system attempts to dereference this NULL pointer, it can cause a crash or unexpected behavior, potentially leading to denial of service or exploitation by malicious actors. The issue was reported by Syzbot, highlighting the importance of rigorous testing and validation in kernel development.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2022-49202 is a critical vulnerability in the Linux kernel's Bluetooth module that can lead to severe system issues if not addressed. Users are strongly advised to update their systems to the latest patched version to ensure security and stability. Monitoring tools like Vulert can assist in identifying such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49202 is a vulnerability in the Linux kernel's Bluetooth module that can lead to a general protection fault due to a missing NULL check.
If exploited, this vulnerability can cause system crashes or unexpected behavior, potentially leading to denial of service.
You should update your Linux kernel to version 5.17.3-1 or later to mitigate this vulnerability.
Yes, tools like Vulert can help monitor and alert you in real-time for open-source vulnerabilities in your software without requiring access to the code.
Yes, you can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
