PT-2025-8066

CVE-2022-49138

·

Published

2022-01-01

·

Updated

2026-10-09

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory corruption issue exists due to the registration of devices multiple times when multiple connection complete events are received for the same handle. To address this, the code now ignores consequent events for a single connection. The introduction of HCI CONN HANDLE UNSET helps identify new connections, and checks for HCI CONN HANDLE MAX prevent the use of invalid handles.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
AZL-67673
SUSE-SU-2025:02588-1
SUSE-SU-2025_02588-1
SUSE-SU-2025:02846-1
SUSE-SU-2025_02846-1
SUSE-SU-2025:02849-1
SUSE-SU-2025_02849-1
SUSE-SU-2025:02851-1
SUSE-SU-2025:02852-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03628-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
SUSE-SU-2025:2588-1
SUSE-SU-2025:3761-1
Found an issue in the description? Have something to add? Feel free to write us 👾