Use After Free Vulnerability in Bluetooth HCI Send ACL
Summary
GSD-2022-1002404: Bluetooth: Fix use after free in hci_send_acl. Affects Kernel versions < 643a6c26bd32e339d00ad97b8822b6db009e803c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is the Linux Kernel, which is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The Bluetooth subsystem within the Linux Kernel enables communication with Bluetooth devices. The vulnerability identified in this package lies in the hci_send_acl function, which is responsible for sending data packets over the Bluetooth HCI (Host Controller Interface).
Vulnerability Detail
The use after free vulnerability in hci_send_acl occurs when a Bluetooth data packet is sent after the memory it references has been freed. This can lead to a variety of issues, including crashes, memory corruption, and potential remote code execution. An attacker could potentially exploit this vulnerability by crafting a malicious Bluetooth packet and sending it to a vulnerable system, triggering the use after free condition. Successful exploitation could result in the compromise of the affected system or the execution of arbitrary code with kernel-level privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The use after free vulnerability in hci_send_acl within the Linux Kernel's Bluetooth subsystem poses a significant risk to affected systems. It is crucial to update to the patched version of the Linux Kernel (v4.14.276 or later) to mitigate this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The use after free vulnerability in hci_send_acl can lead to crashes, memory corruption, and potential remote code execution. An attacker could exploit this vulnerability to compromise the affected system or execute arbitrary code with kernel-level privileges.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities, including this one.
Yes, a patch is available in the Linux Kernel version v4.14.276. Updating to this version will address the use after free vulnerability in hci_send_acl.
At the time of this report, no known exploits have been identified for this vulnerability. However, it is important to apply the recommended patch as soon as possible to mitigate the risk.
The vulnerability was discovered by an automated process and reported as part of the Open Source Vulnerability Database.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
