UBUNTU-CVE-2022-42896

    Dashboard / Vulnerabilities / UBUNTU-CVE-2022-42896

    UBUNTU-CVE-2022-42896

    Published: 23 Nov 2022Last Modified: 9 Sept 2026
    Upstream:
    CVE-2022-42896
    Aliases:
    USN-5780-1
    USN-5783-1
    USN-5794-1

    Summary:

    Details: There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit  https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

    References: https://ubuntu.com/security/CVE-2022-42896, https://git.kernel.org/linus/711f8c3fb3db61897080468586b970c87c61d9e4, https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4, https://ubuntu.com/security/notices/USN-5780-1, https://ubuntu.com/security/notices/USN-5783-1, https://ubuntu.com/security/notices/USN-5794-1, https://ubuntu.com/security/notices/USN-5802-1, https://ubuntu.com/security/notices/USN-5803-1, https://ubuntu.com/security/notices/USN-5804-1, https://ubuntu.com/security/notices/USN-5804-2, https://ubuntu.com/security/notices/USN-5808-1, https://ubuntu.com/security/notices/USN-5809-1, https://ubuntu.com/security/notices/USN-5813-1, https://ubuntu.com/security/notices/USN-5814-1, https://ubuntu.com/security/notices/USN-5829-1, https://ubuntu.com/security/notices/USN-5830-1, https://ubuntu.com/security/notices/USN-5831-1, https://ubuntu.com/security/notices/USN-5832-1, https://ubuntu.com/security/notices/USN-5860-1, https://ubuntu.com/security/notices/USN-5861-1, https://ubuntu.com/security/notices/USN-5863-1, https://ubuntu.com/security/notices/USN-5875-1, https://ubuntu.com/security/notices/USN-5877-1, https://ubuntu.com/security/notices/USN-5879-1, https://ubuntu.com/security/notices/USN-5914-1, https://ubuntu.com/security/notices/USN-5918-1, https://www.cve.org/CVERecord?id=CVE-2022-42896

    Affected packages

    Package

    Name: linux-aws

    Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.4.0-1115.121

    Affected versions

    4.4.0-1002.2
    4.4.0-1003.3
    4.4.0-1005.5
    4.4.0-1006.6
    4.4.0-1009.9
    4.4.0-1010.10
    4.4.0-1011.11
    4.4.0-1012.12
    4.4.0-1014.14
    4.4.0-1016.16
    4.4.0-1017.17
    4.4.0-1019.19
    4.4.0-1022.22
    4.4.0-1023.23
    4.4.0-1024.25
    4.4.0-1025.26
    4.4.0-1027.30
    4.4.0-1028.31
    4.4.0-1029.32
    4.4.0-1031.34
    4.4.0-1032.35
    4.4.0-1034.37
    4.4.0-1036.39
    4.4.0-1037.40
    4.4.0-1038.41
    4.4.0-1039.42
    4.4.0-1040.43
    4.4.0-1042.45
    4.4.0-1044.47
    4.4.0-1045.48
    4.4.0-1046.50
    4.4.0-1048.52
    4.4.0-1050.54
    4.4.0-1052.56
    4.4.0-1054.58
    4.4.0-1055.59
    4.4.0-1056.60
    4.4.0-1058.62
    4.4.0-1059.63
    4.4.0-1060.64
    4.4.0-1061.65
    4.4.0-1062.66
    4.4.0-1064.68
    4.4.0-1065.69
    4.4.0-1066.70
    4.4.0-1067.71
    4.4.0-1073.77
    4.4.0-1074.78
    4.4.0-1075.79
    4.4.0-1076.80
    4.4.0-1077.81
    4.4.0-1078.82
    4.4.0-1081.85
    4.4.0-1082.86
    4.4.0-1083.87
    4.4.0-1085.89
    4.4.0-1086.90
    4.4.0-1087.91
    4.4.0-1088.92
    4.4.0-1090.94
    4.4.0-1091.95
    4.4.0-1092.96
    4.4.0-1093.97
    4.4.0-1094.99
    4.4.0-1095.100
    4.4.0-1096.101
    4.4.0-1097.102
    4.4.0-1098.103
    4.4.0-1099.104
    4.4.0-1101.106
    4.4.0-1102.107
    4.4.0-1103.108
    4.4.0-1104.109
    4.4.0-1107.113
    4.4.0-1109.115
    4.4.0-1110.116
    4.4.0-1111.117
    4.4.0-1112.118
    4.4.0-1113.119
    4.4.0-1114.120

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2022-42896 | CVE-DB