CVE-2022-42895 MEDIUM

CVE-2022-42895: Info Leak in l2cap_core in the Linux Kernel

Vendor Linux
Product Linux Kernel
Weakness CWE-824
Published November 23, 2022
Last update April 21, 2025

CVSS base score

5.1/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

Key dates

02Disclosure timeline

November 23, 2022 CVE published
April 21, 2025 Record updated