CVE-2022-3640 Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free
A use-after-free vulnerability in the Linux Kernel Bluetooth subsystem allows attackers to execute arbitrary code or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-3640?
CVE-2022-3640 is a medium-severity use after free vulnerability in Debian Debian Linux, published on 21 Oct 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.
Which versions are affected by CVE-2022-3640?
It affects 3 products.
Linux distribution packages (1)
kernel-source openSUSE:Tumbleweed | All versions | 6.0.5-1.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Linux kernel.
How do I fix CVE-2022-3640?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-3640 being exploited?
There is no known exploitation of CVE-2022-3640 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2022-3640, GHSA-hx6h-vxvg-2g6w, UBUNTU-CVE-2022-3640, openSUSE-SU-2024:12456-1.