CVE-2022-3564

MEDIUM

Linux Kernel - Use After Free

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

Exploits (1)

nomisec STUB
by Trinadh465 · poc
https://github.com/Trinadh465/linux-4.1.15_CVE-2022-3564

Scores

CVSS v3 5.5
EPSS 0.0009
EPSS Percentile 25.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-119 CWE-362
Status published
Products (6)
debian/debian_linux 10.0
linux/linux_kernel 3.6 - 4.9.333
netapp/h300s_firmware
netapp/h410s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
Published Oct 17, 2022
Tracked Since Feb 18, 2026