CVE-2022-3637: Linux Kernel BlueZ jlink.c jlink_init denial of service

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-21 · updated 2026-06-17
Weakness: CWE-404

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.

Affected products

BlueZ: before 5.65 — fixed in 5.65

How to fix

Upgrade to a fixed version: BlueZ 5.65. Check the vendor advisory for mitigations.

References

https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f
https://vuldb.com/?id.211936
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f
https://vuldb.com/?id.211936

Get alerted when CVE-2022-3637 or the next vulnerability affects your stack