Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48971 Details

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is not called to unregister it. This can cause panic if the argument "bluetooth-power" in text is freed and then another led_trigger_register() tries to access it: BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0 led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/2c6cf0afc3856359e620e96edd952457d258e16c kernel.orgPatch
https://git.kernel.org/stable/c/2f3957c7eb4e07df944169a3e50a4d6790e1c744 kernel.orgPatch
https://git.kernel.org/stable/c/5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f kernel.orgPatch
https://git.kernel.org/stable/c/8a66c3a94285552f6a8e45d73b34ebbad11d388b kernel.orgPatch
https://git.kernel.org/stable/c/e7b950458156d410509a08c41930b75e72985938 kernel.orgPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.9, < 4.19.269
>= 4.20, < 5.4.227
>= 5.5, < 5.10.159
>= 5.11, < 5.15.83
>= 5.16, < 6.0.13

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-48971
NVD Published Date:
Oct 21, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2022-48971 Details - Not Deferred