CVE-2022-42895

Updated: 2026-02-27 02:33:25.791089

Description:

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 6.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 6.5 MEDIUM Released CLSA-2025:1743193221 2024-06-24 11:28:49
CentOS 6 ELS kernel 2.6.32 6.5 MEDIUM Ignored 2023-10-27 11:07:03 Ignored due to low severity
CentOS 7 ELS kernel 3.10.0 6.5 MEDIUM Released CLSA-2024:1726651745 2024-09-26 12:58:05
CentOS 8.4 ELS kernel 4.18.0 6.5 MEDIUM Ignored 2024-06-24 11:40:36 Ignored due to low severity
CentOS 8.5 ELS kernel 4.18.0 6.5 MEDIUM Ignored 2024-06-24 11:40:36 Ignored due to low severity
CentOS Stream 8 ELS kernel 4.18.0 6.5 MEDIUM Ignored 2024-06-24 11:20:05 Ignored due to low severity
CloudLinux 6 ELS kernel 2.6.32 6.5 MEDIUM Ignored 2023-10-27 11:07:03 Ignored due to low severity
CloudLinux 7 ELS kernel 3.10.0 6.5 MEDIUM Ignored 2024-10-03 10:52:01 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 6.5 MEDIUM Ignored 2023-10-27 11:07:03 Ignored due to low severity
RHEL 7 ELS kernel 3.10.0 6.5 MEDIUM Released CLSA-2025:1750353839 2025-06-20 04:44:43
Total: 13