CVE-2022-49139

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue has been identified in the Linux kernel related to Bluetooth functionality. Specifically, this issue occurs when a HCI Synchronous Connection Complete event is received for a BDADDR of an existing LE connection with a status that triggers a particular case of packet processing, resulting in a null pointer dereference because conn->link is NULL. This event is specified for SCO and eSCO link types.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.