What’s Vulnerable › Vulnerabilities

CVE-2022-42895: Info Leak in l2cap_core in the Linux Kernel

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-23 · updated 2026-10-14
• Weakness: CWE-824

Description

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

Affected products

• Linux kernel: all versions

References

• https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
• https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e
• https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
• https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Get alerted when CVE-2022-42895 or the next vulnerability affects your stack