CVE-2022-42896: Info Leak in l2cap_core in the Linux Kernel

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-23 · updated 2026-10-14
Weakness: CWE-416

Description

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

Affected products

Linux kernel: before 4.9.335; from 4.10 before 4.14.301; from 4.15 before 4.19.268; from 4.20 before 5.4.226; from 5.5 before 5.10.154; from 5.11 before 5.15.78 — fixed in 4.14.301, 4.19.268, 4.9.335, 5.10.154, 5.15.78, 5.4.226

How to fix

Upgrade to a fixed version: Linux kernel 4.14.301, 4.19.268, 4.9.335, 5.10.154. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-42896 or the next vulnerability affects your stack