Skip to content
OpenAdvisories
High USN-5783-1 1 CVE

linux-oem-5.17 vulnerability

Published Dec 16, 2022 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation
in the Linux kernel contained multiple use-after-free vulnerabilities. A
physically proximate attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-oem-5.17 5.17.0-1025.26

Vulnerabilities 1

  • High 8.0
    CVE-2022-42896 Public exploit

    Info Leak in l2cap_core in the Linux Kernel

    There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker coul…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-42896