CVE-2022-3564: Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-17 · updated 2026-10-14
Weakness: CWE-119

Description

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

Affected products

Debian Linux: 10.0
Linux kernel: from 3.6 before 4.9.333; from 4.10 before 4.14.299; from 4.15 before 4.19.265; from 4.20 before 5.4.224; from 5.5.0 before 5.10.154; from 5.11 before 5.15.78 — fixed in 4.14.299, 4.19.265, 4.9.333, 5.10.154, 5.15.78, 5.4.224
NetApp H300S Firmware: all versions
NetApp H410S Firmware: all versions
NetApp H500S Firmware: all versions
NetApp H700S Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 4.14.299, 4.19.265, 4.9.333, 5.10.154. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-3564 or the next vulnerability affects your stack