CVE-2022-3563
Fixed in a distro release EPSS <1%CVSS 3.5
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
Products: Linux kernel
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | bluez | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-cups | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-deprecated | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-hid2hci | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-libs | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-libs-devel | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-mesh | 5.62-2.amzn2023.0.4 |
| Amazon Linux 2023 | bluez-obexd | 5.62-2.amzn2023.0.4 |
| Debian 12 | bluez | 5.65-1 |
| Debian 13 | bluez | 5.65-1 |
| Debian 14 | bluez | 5.65-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | bluez | 5.62-150400.4.8.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | bluez | 5.62-150400.4.8.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP4 | bluez | 5.62-150400.4.8.1 |
| Ubuntu 20.04 LTS | bluez | 5.53-0ubuntu3.8 |
| Ubuntu 22.04 LTS | bluez | 5.64-0ubuntu1.3 |
| Ubuntu Pro 16.04 LTS | bluez | 5.37-0ubuntu5.3+esm4 |
| Ubuntu Pro 18.04 LTS | bluez | 5.48-0ubuntu3.9+esm2 |
| openSUSE Leap 15.4 | bluez | 5.62-150400.4.8.1 |