PT-2021-7476 · Linux+9 · Linux Kernel+9

Duoming Zhou · Published 2021-10-17 · Updated 2024-08-20 · CVE-2022-3565

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A critical issue has been found in the Linux Kernel, specifically in the del timer function of the drivers/isdn/mISDN/l1oip core.c file, which is part of the Bluetooth component. This issue leads to use after free, potentially allowing a remote attacker to execute arbitrary code.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-662

CWE-416

Related Identifiers

ALSA-2024:2950

ALSA-2024:3138

ALT-PU-2022-2913

ALT-PU-2022-2925

ALT-PU-2022-2932

ALT-PU-2022-2951

ALT-PU-2022-2961

ALT-PU-2022-2965

ALT-PU-2022-2968

ALT-PU-2022-2970

ALT-PU-2022-2975

ALT-PU-2022-2976

ALT-PU-2022-3061

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

BDU:2022-06620

CESA-2024_2950

CESA-2024_3138

CVE-2022-3565

DLA-3244-1

DLA-3245-1

INFSA-2024_2950

INFSA-2024_3138

MGASA-2022-0442

MGASA-2022-0443

OESA-2022-2025

OESA-2022-2026

OESA-2022-2033

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0226-1

SUSE-SU-2023:0238-1

SUSE-SU-2023:0250-1

SUSE-SU-2023:0263-1

SUSE-SU-2023:0271-1

SUSE-SU-2023:0416-1

USN-5754-1

USN-5754-2

USN-5755-1

USN-5755-2

USN-5756-1

USN-5756-2

USN-5756-3

USN-5757-1

USN-5757-2

USN-5758-1

USN-5774-1

USN-5779-1

USN-5913-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 848

• https://linux.oracle.com/errata/ELSA-2022-10065.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3565 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0250-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2153 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3245-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0238-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0226-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3565 · Security Note
• https://osv.dev/vulnerability/OESA-2022-2033 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5756-3 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3138 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4273-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0442 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3521 · Security Note