CVE-2022-48947

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2

Description The issue is related to a Bluetooth vulnerability in the Linux kernel, specifically an overflow in the L2CAP protocol. By continuously sending L2CAP CONF REQ packets, an attacker can cause the chan->num conf rsp variable to increase multiple times, eventually wrapping around the maximum number, which is 255. This is prevented by adding a boundary check with L2CAP MAX CONF RSP. The vulnerability can be exploited by sending packets with invalid sizes.

Recommendations To resolve the issue, update the Linux kernel to version 6.1.0-rc2 or later. As a temporary workaround, consider disabling Bluetooth functionality until a patch is available. Restrict access to the L2CAP protocol to minimize the risk of exploitation. Avoid using the L2CAP CONF REQ packet type in the affected API endpoint until the issue is resolved.