PT-2024-11836

CVE-2022-48971

·

Published

2022-12-02

·

Updated

2026-10-21

Description by

CVSS 4.0
5.7
Medium
MetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to errors in resource management within the Linux kernel's Bluetooth component, specifically in the bt init() and sock unregister() functions. This can lead to a panic if the "bluetooth-power" argument is freed and then accessed by another led trigger register() call. The problem arises because bt leds cleanup() is not called to unregister the led when bt init() fails.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2025_16880
ALT-PU-2023-1066
CLSA-2026-1783791447
OESA-2024-2370
OESA-2025-1016
OPENSUSE-SU-2024_3983-1
OPENSUSE-SU-2024_3985-1
OPENSUSE-SU-2024_4131-1
SUSE-SU-2024:3983-1
SUSE-SU-2024:3985-1
SUSE-SU-2024:4082-1
SUSE-SU-2024:4100-1
SUSE-SU-2024:4131-1
SUSE-SU-2024:4364-1
SUSE-SU-2025:0034-1
Found an issue in the description? Have something to add? Feel free to write us 👾