CVE-2022-49470

Summary

CVE-2022-49470: A use-after-free vulnerability was identified in the Linux kernel's Bluetooth subsystem (btmtksdio). This issue was caused by accessing SKB buffer data after hci_recv_frame was called, leading to a KASAN report of a use-after-free error. The affected code is located in btmtksdio_recv_event, and was freed by task 2392. The vulnerable memory region was a kmalloc-512 allocation of size 512 bytes, with the buggy address being 13 bytes inside this region at ffffff80cf28a60d.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.