Use after free vulnerability in hci_send_acl in Bluetooth
Summary
GSD-2022-1001042: Bluetooth: Fix use after free in hci_send_acl. Affects Kernel versions < b3c2ea1fd444b3bb7b82bfd2c3a45418f85c2502. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package in the Linux ecosystem is responsible for managing the core functionality of the operating system. It provides essential services and functions to enable the proper functioning of the system. Bluetooth is a wireless communication technology that allows devices to connect and exchange data over short distances. The hci_send_acl function in the Bluetooth subsystem is used to send ACL (Asynchronous Connection-Less) data packets over the Bluetooth interface.
Vulnerability Detail
The hci_send_acl function in the Bluetooth subsystem of the Kernel package suffers from a use after free vulnerability. This vulnerability occurs when the function continues to use a memory block after it has been freed, leading to potential memory corruption or crashes. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use after free vulnerability in hci_send_acl in the Bluetooth subsystem of the Kernel package has been addressed in Linux Kernel version v5.17.3. It is crucial to update the Kernel package to the latest version to mitigate the risk associated with this vulnerability. For more information and assistance, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial of service.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Kernel package to the latest version to apply the fix.
You can find more information about this vulnerability in the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/. The specific commit b3c2ea1fd444b3bb7b82bfd2c3a45418f85c2502 provides detailed information about the fix.
For further support on vulnerability remediation, you can reach out to info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
