Buffer Overflow Vulnerability in Linux Kernel Bluetooth Management - CVE-2022-49754
Summary
CVE-2022-49754: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Smatch Warning: net/bluetooth/mgmt_util.c:375 mgmt_mesh_add() error: __memcpy() 'mesh_tx->param' too... Affects linux versions < 6.1.11-1. Fixed in 6.1.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the system, including device drivers, system calls, and process management. The Bluetooth subsystem within the kernel enables wireless communication between devices. This vulnerability specifically affects the Bluetooth management functions, which are crucial for handling Bluetooth connections and data transfers.
Vulnerability Detail
CVE-2022-49754 is a buffer overflow vulnerability found in the Bluetooth management function mgmt_mesh_add() of the Linux kernel. The issue arises because the function attempts to copy data into a destination buffer that is smaller than the data being copied. Specifically, the destination buffer 'mesh_tx->param' is only 48 bytes in size, while the function allows for a length of up to 50 bytes to be processed. This discrepancy can lead to memory corruption, potentially allowing an attacker to execute arbitrary code or crash the system.
How To Fix
Minimum fixed version
6.1.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can limit the input size to ensure that it does not exceed the buffer size of 48 bytes. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
CVE-2022-49754 is a critical buffer overflow vulnerability in the Linux kernel's Bluetooth management functionality. It is essential to update to the patched version to mitigate potential security risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49754 is a buffer overflow vulnerability in the Bluetooth management function of the Linux kernel that can lead to memory corruption.
If exploited, this vulnerability can allow an attacker to execute arbitrary code or crash the system, posing a significant security risk.
The vulnerability affects Linux kernel versions prior to 6.1.11-1 in Debian 12 and 13.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If you cannot update immediately, consider implementing input size restrictions as a temporary workaround until you can apply the patch.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
