CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix not cleanup led when btinit fails
btinit() calls btledsinit() to register led, but if it fails later, btledscleanup() is not called to unregister it.
This can cause panic if the argument "bluetooth-power" in text is freed and then another ledtriggerregister() tries to access it:
BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> ledtriggerregister+0x10d/0x4f0 ledtriggerregistersimple+0x7d/0x100 btinit+0x39/0xf7 [bluetooth] dooneinitcall+0xd0/0x4e0
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48971?
CVE-2022-48971 has a moderate severity level due to potential system panic when Bluetooth initialization fails.
How do I fix CVE-2022-48971?
Fixing CVE-2022-48971 involves updating the Linux kernel to a version that has addressed the issue.
What versions of Linux kernel are affected by CVE-2022-48971?
CVE-2022-48971 affects Linux kernel versions from 4.9 up to 6.1-rc8.
What are the risks associated with CVE-2022-48971?
The main risk associated with CVE-2022-48971 is potential system instability leading to panic if Bluetooth initialization fails.
What mitigation strategies exist for CVE-2022-48971 prior to patching?
Mitigation strategies for CVE-2022-48971 include disabling Bluetooth functionality until a patch is applied.