Use After Free Vulnerability in Bluetooth (Kernel)
Summary
GSD-2022-1001384: Bluetooth: Fix use after free in hci_send_acl. Affects Kernel versions < 4da302b90b96c309987eb9b37c8547f939f042d2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software. It plays a vital role in the overall functionality and stability of the system. The Bluetooth subsystem within the Kernel enables wireless communication between devices, allowing for the seamless transfer of data and audio. However, a vulnerability has been discovered in the hci_send_acl function, which could lead to a use after free scenario.
Vulnerability Detail
The use after free vulnerability in hci_send_acl within the Bluetooth subsystem of the Kernel allows an attacker to exploit a freed memory region. By manipulating the freed memory, an attacker can potentially execute arbitrary code or cause a denial of service. This vulnerability could be triggered by sending a specially crafted Bluetooth packet to a vulnerable device. Successful exploitation of this vulnerability could result in remote code execution, privilege escalation, or system crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patch or update the Kernel to the fixed version as soon as possible.
Conclusion
The use after free vulnerability in the hci_send_acl function of the Bluetooth subsystem in the Kernel poses a significant risk to the security and stability of affected systems. It is crucial to update the Kernel to version v5.16.20 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can be severe, potentially leading to remote code execution, privilege escalation, or system crashes.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for any open-source vulnerabilities, including this one.
At the time of this report, there is no known public exploit for this vulnerability. However, it is crucial to patch your system promptly to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely. An attacker can send a specially crafted Bluetooth packet to a vulnerable device to trigger the use after free scenario.
The only effective mitigation for this vulnerability is to update the Kernel to the fixed version or apply the official patch. It is recommended to keep your system up to date with the latest security updates.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
