VDB
UBUNTU-CVE-2022-3640
UBUNTU-CVE-2022-3640
PUBLISHED
CVSS 8.800000190734863 HIGH
A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-ibm-5.4 | 5.4.0-1026.29~18.04.1, 5.4.0-1029.33~18.04.1, 5.4.0-1031.35~18.04.1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1029.36.1, 5.15.0-1024.30.1, 0 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-azure-fips | 0, 5.4.0-1022.22+fips1, 5.4.0-1073.76+fips1 |
| Ubuntu:20.04:LTS | linux-oem-5.6 | 5.6.0-1021.21, 5.6.0-1055.59, 5.6.0-1054.58 |
| Ubuntu:18.04:LTS | linux-azure-5.4 | 5.4.0-1073.76~18.04.1, 5.4.0-1040.42~18.04.1, 5.4.0-1039.41~18.04.1 |
| Ubuntu:20.04:LTS | linux-raspi2 | 0, 5.4.0-1004.4, 5.3.0-1017.19 |
| Ubuntu:Pro:16.04:LTS | linux-azure | 4.15.0-1041.45, 4.15.0-1042.46, 4.15.0-1045.49 |
| Ubuntu:Pro:16.04:LTS | linux-aws | 4.4.0-1048.57, 0, 4.4.0-1001.10 |
| Ubuntu:20.04:LTS | linux-gcp-5.13 | 5.13.0-1019.23~20.04.1, 5.13.0-1015.18~20.04.1, 5.13.0-1013.16~20.04.1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 0, 6.2.0-1013.13, 6.2.0-1012.12 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1052.55, 5.4.0-1068.71, 5.4.0-1067.70 |
| Ubuntu:20.04:LTS | linux-azure-5.8 | 5.8.0-1033.35~20.04.1, 5.8.0-1039.42~20.04.1, 5.8.0-1040.43~20.04.1 |
| Ubuntu:Nvidia-BlueField:22.04:LTS | linux-bluefield | 5.15.0-1011.13, 0 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1018.21, 5.15.0-1017.20, 5.15.0-1022.25 |
| Ubuntu:20.04:LTS | linux-aws-5.8 | 0, 5.8.0-1042.44~20.04.1, 5.8.0-1041.43~20.04.1 |
| Ubuntu:18.04:LTS | linux-aws | 4.15.0-1054.56, 4.15.0-1056.58, 4.15.0-1057.59 |
| Ubuntu:Pro:14.04:LTS | linux-aws | 4.4.0-1034.37, 4.4.0-1086.90, 4.4.0-1085.89 |
| Ubuntu:20.04:LTS | linux-bluefield | 5.4.0-1036.39, 5.4.0-1054.60, 5.4.0-1040.44 |
| Ubuntu:20.04:LTS | linux-intel-iotg-5.15 | 5.15.0-1003.5~20.04.1, 5.15.0-1010.14~20.04.1, 5.15.0-1015.20~20.04.2 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1013.16, 4.15.0-1103.114, 4.15.0-1102.113 |
…and 106 more
Timeline
- Oct 21, 2022 CVE Published
- Oct 5, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
References
- https://ubuntu.com/security/CVE-2022-3640 report
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=42cf46dea905a80f6de218e837ba4d4cc33d6979 report
- https://ubuntu.com/security/notices/USN-5850-1 advisory
- https://ubuntu.com/security/notices/USN-5851-1 advisory
- https://ubuntu.com/security/notices/USN-5853-1 advisory
- https://ubuntu.com/security/notices/USN-5860-1 advisory
- https://ubuntu.com/security/notices/USN-5874-1 advisory
- https://ubuntu.com/security/notices/USN-5875-1 advisory
- https://ubuntu.com/security/notices/USN-5876-1 advisory
- https://ubuntu.com/security/notices/USN-5877-1 advisory
- https://ubuntu.com/security/notices/USN-5878-1 advisory
- https://ubuntu.com/security/notices/USN-5879-1 advisory
- https://ubuntu.com/security/notices/USN-5883-1 advisory
- https://ubuntu.com/security/notices/USN-5909-1 advisory
- https://ubuntu.com/security/notices/USN-5918-1 advisory
- https://ubuntu.com/security/notices/USN-5919-1 advisory
- https://ubuntu.com/security/notices/USN-5920-1 advisory
- https://ubuntu.com/security/notices/USN-5924-1 advisory
- https://ubuntu.com/security/notices/USN-5925-1 advisory
- https://ubuntu.com/security/notices/USN-5927-1 advisory
…and 6 more