Use-After-Free Vulnerability in Linux Kernel Bluetooth Stack

CVE-2022-49909

Summary

A use-after-free vulnerability exists in the Bluetooth L2CAP implementation of the Linux kernel. This vulnerability occurs when the system fails to adequately manage the reference counting of channels during error conditions. Specifically, when a channel is created and subsequently freed without proper synchronization, it could lead to a potential exploit vector. This flaw may allow an attacker to cause system instability, execute arbitrary code, or create denial of service conditions, making it crucial to apply timely patches to mitigate associated risks.

References