CVE-2022-49909: Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
Published May 1, 2025
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Event History
May 1, 2025
CVE Published
via MITRE·02:10 PM
Rejected
via MITRE·02:10 PM
Data Sourced
via NVD·03:16 PM
Description
Dec 2, 2025
Rejected
via MITRE·03:42 PM
Frequently Asked Questions
1
What is the severity of CVE-2022-49909?
CVE-2022-49909 has been classified as a medium severity vulnerability.
2
How does CVE-2022-49909 affect the Linux kernel?
CVE-2022-49909 affects the Linux kernel by introducing a use-after-free vulnerability in the Bluetooth L2CAP protocol.
3
What versions of the Linux kernel are impacted by CVE-2022-49909?
CVE-2022-49909 impacts specific versions of the Linux kernel that include the vulnerable Bluetooth functionality.
4
How do I fix CVE-2022-49909?
To fix CVE-2022-49909, upgrade to a patched version of the Linux kernel that resolves the vulnerability.
5
What are the potential risks of not addressing CVE-2022-49909?
Not addressing CVE-2022-49909 may allow an attacker to exploit the vulnerability, potentially leading to arbitrary code execution or system compromise.