CVE-2022-3565
Assigner: VulDB
Published: 2022-10-17T00:00:00
State: PUBLISHED
title: Linux Kernel Bluetooth l1oip_core.c del_timer use after free
descriptions: value: A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.
affected: vendor: Linux
product: Kernel
versions: version: n/a
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
attackVector: ADJACENT_NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 4.6
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-119 Memory Corruption -> CWE-416 Use After Free
cweId: CWE-119
x_generator: vuldb.com