PT-2025-38436

CVE-2022-50419

·

Published

2022-09-21

·

Updated

2026-10-21

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the Bluetooth subsystem, specifically in the hci sysfs component. The device add function may be called multiple times, violating its documented limitations. This can lead to a kernel bug, as reported by Syzkaller. The issue occurs during Bluetooth connection establishment and event processing within the hci le cis estabilished evt and hci le meta evt functions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
CLSA-2026-1768669128
CLSA-2026-1768775579
CLSA-2026-1769610819
CLSA-2026-1770028389
CLSA-2026-1775779453
CLSA-2026-1777616064
OESA-2025-2406
SUSE-SU-2025:03613-1
SUSE-SU-2025:03614-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03626-1
SUSE-SU-2025:03628-1
SUSE-SU-2025:3716-1
SUSE-SU-2025:3761-1
Found an issue in the description? Have something to add? Feel free to write us 👾