{"id":"CVE-2022-42896","title":"There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. …","summary":"There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. …","severity":"high","cvss":8,"cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 4.9.335","linux_kernel >= 4.10, < 4.14.301","linux_kernel >= 4.15, < 4.19.268","linux_kernel >= 4.20, < 5.4.226","linux_kernel >= 5.5, < 5.10.154","linux_kernel >= 5.11, < 5.15.78","linux_kernel >= 5.16, < 6.0.8"],"patched":["linux_kernel 6.0.8"],"published":"2022-11-23","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:16:52.337","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-42896","references":[{"url":"https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4","label":"cve-coordination@google.com"},{"url":"https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4","label":"cve-coordination@google.com"},{"url":"https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kernel.dance/#711f8c3fb3db61897080468586b970c87c61d9e4","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.0245,"epssPercentile":0.84291,"exploits":{"github":2,"githubRepos":["https://github.com/Satheesh575555/linux-4.19.72_CVE-2022-42896","https://github.com/Trinadh465/linux-4.19.72_CVE-2022-42896"],"checkedAt":"2026-10-27T16:40:50.627Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T19:49:57.525Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-04-21T13:37:08.196759Z"},"slug":"CVE-2022-42896","body":"## Overview\n\nThere are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim.\n\nWe recommend upgrading past commit   https://www.google.com/url  https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url \n\n\n\n## Affected\n\n- `linux_kernel < 4.9.335`\n- `linux_kernel >= 4.10, < 4.14.301`\n- `linux_kernel >= 4.15, < 4.19.268`\n- `linux_kernel >= 4.20, < 5.4.226`\n- `linux_kernel >= 5.5, < 5.10.154`\n- `linux_kernel >= 5.11, < 5.15.78`\n- `linux_kernel >= 5.16, < 6.0.8`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.0.8`","depth":"midnight","depthScore":56,"depthScoreParts":{"impact":44,"likelihood":0.5,"exploitation":12,"ransomware":0},"changes":[]}