CVE-2022-49136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel's Bluetooth handling has been identified, specifically in the hci sync function. The problem occurs when the HCI UNREGISTER flag is set, which indicates that hci unregister dev has been called. In this scenario, the hci cmd sync queue function should return an error to prevent a potential use-after-free (uaf) error after a timeout, as the hdev will have been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.