PT-2025-40132

CVE-2022-50447

Published

2022-12-12

Updated

2025-10-23

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7-02243-gb84a13ff4eda

Description A crash can occur in the Bluetooth stack when attempting to connect multiple ISO sockets without using DEFER SETUP. This issue is related to a null-ptr-deref in the hci create cis sync function. The crash occurs within the hci cmd sync work workqueue. The issue was observed on QEMU Standard PC hardware with BIOS version 1.16.0-1.fc36.

Recommendations Update to a version newer than 6.0.0-rc7-02243-gb84a13ff4eda.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers

CVE-2022-50447

BDU:2026-06087