Description
drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.16.7-1 | — |
| Debian 13 | linux | 5.16.7-1 | — |
| Debian 12 | linux | 5.16.7-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-aws-5.13 | 5.13.0-1022.24~20.04.1 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-azure-5.13 | 5.13.0-1022.26~20.04.1 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | 5.13.0-1024.29~20.04.1 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | 5.13.0-40.45~20.04.1 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-intel-5.13 | 5.13.0-1011.11 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1024.26 | — |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | 5.13.0-1027.32~20.04.1 | USN-5383-1 |
| Ubuntu 20.04 LTS | linux-riscv +16 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +12 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.32.1-2 | — |
Advisories 1
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1d0688421449718c6c5f46e458a378c9b530ba18
- https://lore.kernel.org/linux-bluetooth/1A203F5E-FB5E-430C-BEA3-86B191D69D58%40holtmann.org/
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.17
- [oss-security] 20220311 CVE-2022-26878: Memory leak in Linux VirtIO Bluetooth driver mailing-list