PT-2024-11818 · Linux+6 · Linux Kernel+6
Luiz Augusto Von Dentz
+1
·
Published
2022-12-02
·
Updated
2025-09-29
·
CVE-2022-48947
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc2
Description
The issue is related to a Bluetooth vulnerability in the Linux kernel, specifically an overflow in the L2CAP protocol. By continuously sending L2CAP CONF REQ packets, an attacker can cause the
chan->num conf rsp variable to increase multiple times, eventually wrapping around the maximum number, which is 255. This is prevented by adding a boundary check with L2CAP MAX CONF RSP. The vulnerability can be exploited by sending packets with invalid sizes.Recommendations
To resolve the issue, update the Linux kernel to version 6.1.0-rc2 or later. As a temporary workaround, consider disabling Bluetooth functionality until a patch is available. Restrict access to the L2CAP protocol to minimize the risk of exploitation. Avoid using the
L2CAP CONF REQ packet type in the affected API endpoint until the issue is resolved.Exploit
Fix
DoS
Buffer Overflow
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Suse