Use After Free Vulnerability in Bluetooth: hci_send_acl
Summary
GSD-2022-1001711: Bluetooth: Fix use after free in hci_send_acl. Affects Kernel versions < d404765dffdbd8dcd14758695d0c96c52fb2e624. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, including memory, processes, and input/output operations. Bluetooth is a wireless communication technology commonly used for short-range data exchange between devices. The hci_send_acl function in the Bluetooth subsystem is responsible for sending data packets over the HCI (Host Controller Interface) to the Bluetooth controller. This vulnerability, identified as GSD-2022-1001711, refers to a use after free issue in hci_send_acl.
Vulnerability Detail
The use after free vulnerability in hci_send_acl occurs when the function attempts to access memory that has already been freed. This can lead to various security issues, including the potential for remote code execution or denial of service attacks. An attacker could exploit this vulnerability by sending specially crafted Bluetooth packets, causing the system to access invalid memory and potentially execute arbitrary code. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use after free vulnerability in hci_send_acl can pose a potential security risk in the Linux Kernel's Bluetooth subsystem. It is crucial to update the Kernel to the latest version and apply security patches to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it could potentially lead to remote code execution or denial of service attacks.
An attacker can exploit this vulnerability by sending specially crafted Bluetooth packets, causing the system to access invalid memory and potentially execute arbitrary code.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.15.34.
To protect your system, it is recommended to update your Linux Kernel to the latest version available and apply security patches regularly.
You can find more information about this vulnerability in the GSD-2022-1001711 entry of the GSD database: [link to GSD database entry].
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
