CVE-2022-3565: Linux Kernel Bluetooth l1oip_core.c del_timer use after free
A use-after-free in the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the component Bluetooth in Linux Kernel could allow a remote authenticated attacker from within the local network to cause an unknown impact.
Other sources
A vulnerability has been found in Linux Kernel. Affected by this issue is the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the ISDN (for the ISDN over IP tunnel). The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.
Reference: https://vuldb.com/?id.211088
Upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=2568a7e0832ee30b0a351016d03062ab4e0e0a3f
— Red Hat
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3565?
CVE-2022-3565 is classified as a high-severity vulnerability due to its potential for exploitation through use after free in the Linux Kernel.
Which versions of the Linux Kernel are affected by CVE-2022-3565?
CVE-2022-3565 affects Linux Kernel versions from 2.6.27 up to but not including versions 6.1 and those within specific ranges outlined in the vulnerability report.
How do I fix CVE-2022-3565?
To fix CVE-2022-3565, apply the recommended patches or upgrade to the updated versions of the Linux Kernel specified in the vulnerability details.
What components are primarily affected by CVE-2022-3565?
CVE-2022-3565 primarily affects the del_timer function within the ISDN over IP tunnel in the Linux Kernel.
Is CVE-2022-3565 exploited in the wild?
As of the latest updates, there is no confirmed evidence that CVE-2022-3565 is being actively exploited in the wild.