CVE-2022-49139
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 476
Summary
CVE-2022-49139 is a vulnerability in the Linux kernel that affects Bluetooth functionality. Specifically, it involves a null pointer dereference when processing a HCI_Synchronous_Connection_Complete event for an existing LE connection. The event is only relevant to SCO and eSCO link types. Upon receiving such an event with a BDADDR of an existing LE connection, a null pointer dereference occurs if the link information is not properly initialized (conn->link is NULL). This issue has been resolved in recent Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.