PT-2022-5280 · Linux+9 · Linux Kernel+9

Maxim Mikityanskiy · Published 2022-10-04 · Updated 2025-07-10 · CVE-2022-3564

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A critical vulnerability was found in the Linux Kernel, affecting the l2cap reassemble sdu function of the Bluetooth component. The issue is related to use after free, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Race Condition

Use After Free

Weakness Enumeration

CWE-119

CWE-362

CWE-416

Related Identifiers

ALSA-2023:0951

ALSA-2023:0979

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2023-1342

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

BDU:2022-06564

CESA-2023_2736

CESA-2023_2951

CESA-2023_4151

CVE-2022-3564

DLA-3244-1

DLA-3245-1

MGASA-2022-0442

MGASA-2022-0443

OESA-2022-2025

OESA-2022-2026

OESA-2022-2033

OPENSUSE-SU-2023_0146-1

OPENSUSE-SU-2023_0147-1

OPENSUSE-SU-2023_0149-1

OPENSUSE-SU-2023_0152-1

OPENSUSE-SU-2023_0410-1

RHSA-2023:0856

RHSA-2023:0858

RHSA-2023:0951

RHSA-2023:0979

RHSA-2023:1008

RHSA-2023:1202

RHSA-2023:1203

RHSA-2023:1220

RHSA-2023:1221

RHSA-2023:1251

RHSA-2023:1435

RHSA-2023:1559

RHSA-2023:1560

RHSA-2023:1666

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023:3277

RHSA-2023:3278

RHSA-2023:3388

RHSA-2023:3431

RHSA-2023:3491

RHSA-2023:4020

RHSA-2023:4021

RHSA-2023:4150

RHSA-2023:4151

RHSA-2023:4215

RHSA-2023_0951

RHSA-2023_0979

RHSA-2023_2736

RHSA-2023_2951

RHSA-2023_4150

RHSA-2023_4151

RLSA-2023:0979

RXSA-2023:0951

SUSE-SU-2023:0145-1

SUSE-SU-2023:0146-1

SUSE-SU-2023:0147-1

SUSE-SU-2023:0148-1

SUSE-SU-2023:0149-1

SUSE-SU-2023:0152-1

SUSE-SU-2023:0406-1

SUSE-SU-2023:0407-1

SUSE-SU-2023:0410-1

SUSE-SU-2023:0420-1

SUSE-SU-2023:0519-1

SUSE-SU-2023:0522-1

SUSE-SU-2023:0525-1

SUSE-SU-2023:0528-1

SUSE-SU-2023:0547-1

SUSE-SU-2023:0552-1

SUSE-SU-2023:0553-1

SUSE-SU-2023:0560-1

SUSE-SU-2023:0562-1

SUSE-SU-2023:0578-1

SUSE-SU-2023:0591-1

SUSE-SU-2023:0618-1

SUSE-SU-2023:0637-1

SUSE-SU-2023_0407-1

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01982-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:01995-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01982-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

USN-5754-1

USN-5754-2

USN-5755-1

USN-5755-2

USN-5756-1

USN-5756-2

USN-5756-3

USN-5757-1

USN-5757-2

USN-5758-1

USN-5773-1

USN-5774-1

USN-5779-1

USN-5789-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1173

• https://osv.dev/vulnerability/USN-5789-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2153 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3245-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2033 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0618-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5756-3 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:0951 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0442 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0410-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3521 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:0979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3566 · Security Note
• https://ubuntu.com/security/CVE-2022-20422 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-0979.html · Vendor Advisory