VDB
UBUNTU-CVE-2022-45934
UBUNTU-CVE-2022-45934
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
Risk Scores
CVSS 4.0
5.300000190734863
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-gke-5.4 | 5.4.0-1067.70~18.04.1, 5.4.0-1056.59~18.04.1, 5.4.0-1057.60~18.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-aws | 4.4.0-1057.66, 4.4.0-1060.69, 4.4.0-1061.70 |
| Ubuntu:Pro:16.04:LTS | linux-gcp | 4.15.0-1115.129~16.04.1, 0, 4.10.0-1004.4 |
| Ubuntu:Pro:14.04:LTS | linux-lts-xenial | 4.4.0-87.110~14.04.1, 4.4.0-208.240~14.04.1, 4.4.0-206.238~14.04.1 |
| Ubuntu:20.04:LTS | linux-intel-iotg-5.15 | 5.15.0-1017.22~20.04.1, 5.15.0-1016.21~20.04.1, 0 |
| Ubuntu:18.04:LTS | linux-oracle | 4.15.0-1111.122, 4.15.0-1108.119, 4.15.0-1107.118 |
| Ubuntu:18.04:LTS | linux-azure-4.15 | 4.15.0-1092.102, 4.15.0-1158.173, 4.15.0-1157.172 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.3.0-1007.8, 0, 5.4.0-1006.6 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | 0, 6.8.0-2019.20 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 5.11.0-1014.16~20.04.1, 5.11.0-1009.10~20.04.1, 0 |
| Ubuntu:20.04:LTS | linux-bluefield | 5.4.0-1049.55, 5.4.0-1046.51, 5.4.0-1045.50 |
| Ubuntu:Pro:FIPS:16.04:LTS | linux-fips | 0, 4.4.0-1002.2, 4.4.0-1001.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.8 | 5.8.0-33.36~20.04.1, 5.8.0-63.71~20.04.1, 5.8.0-59.66~20.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.15 | 5.15.0-1026.33~20.04.1, 5.15.0-1025.32~20.04.2, 5.15.0-1022.29~20.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.13 | 0, 5.13.0-1011.13~20.04.2, 5.13.0-1015.19~20.04.1 |
| Ubuntu:20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-56.62~20.04.1, 0, 5.15.0-33.34~20.04.1 |
| Ubuntu:18.04:LTS | linux-snapdragon | 4.15.0-1098.107, 0, 4.4.0-1077.82 |
| Ubuntu:18.04:LTS | linux-raspi2 | 4.15.0-1044.47, 4.15.0-1047.51, 4.15.0-1048.52 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-fips | 4.15.0-1011.12, 0 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1024.30.1, 5.15.0-1030.37.1, 0 |
…and 117 more
Timeline
- Nov 27, 2022 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
References
- https://ubuntu.com/security/CVE-2022-45934 report
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d report
- https://ubuntu.com/security/notices/USN-5794-1 advisory
- https://ubuntu.com/security/notices/USN-5802-1 advisory
- https://ubuntu.com/security/notices/USN-5803-1 advisory
- https://ubuntu.com/security/notices/USN-5804-1 advisory
- https://ubuntu.com/security/notices/USN-5804-2 advisory
- https://ubuntu.com/security/notices/USN-5808-1 advisory
- https://ubuntu.com/security/notices/USN-5809-1 advisory
- https://ubuntu.com/security/notices/USN-5813-1 advisory
- https://ubuntu.com/security/notices/USN-5814-1 advisory
- https://ubuntu.com/security/notices/USN-5829-1 advisory
- https://ubuntu.com/security/notices/USN-5830-1 advisory
- https://ubuntu.com/security/notices/USN-5831-1 advisory
- https://ubuntu.com/security/notices/USN-5832-1 advisory
- https://ubuntu.com/security/notices/USN-5858-1 advisory
- https://ubuntu.com/security/notices/USN-5860-1 advisory
- https://ubuntu.com/security/notices/USN-5861-1 advisory
- https://ubuntu.com/security/notices/USN-5863-1 advisory
- https://ubuntu.com/security/notices/USN-5875-1 advisory
…and 5 more