PT-2025-38436 · Linux+2 · Linux Kernel+2

Published 2022-09-21 · Updated 2025-10-23 · CVE-2022-50419

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Bluetooth subsystem, specifically in the hci sysfs component. The device add function may be called multiple times, violating its documented limitations. This can lead to a kernel bug, as reported by Syzkaller. The issue occurs during Bluetooth connection establishment and event processing within the hci le cis estabilished evt and hci le meta evt functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-371

CWE-415

Related Identifiers

BDU:2026-02441

CVE-2022-50419

OESA-2025-2406

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1043

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50419.json · Exploit
• https://git.kernel.org/stable/c/4bcefec3636208b4c97536b26014d5935d5c10a0 · Patch
• https://git.kernel.org/stable/c/6144423712d570247b8ca26e50a277c30dd13702 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53150 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50249 · Security Note
• https://git.kernel.org/stable/c/1b6c89571f453101251201f0fad1c26f7256e937 · Patch
• https://osv.dev/vulnerability/CVE-2022-50419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38724 · Security Note
• https://git.kernel.org/stable/c/ef055094df4c10b73cfe67c8d43f9de1fb608a8b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53259 · Security Note
• https://git.kernel.org/stable/c/3423a50fa018e88aed4c900d59c3c8334d8ad583 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-39866 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53241 · Security Note
• https://git.kernel.org/stable/c/7b674dce4162bb46d396586e30e4653427023875 · Patch