Tracker / CVE-2022-49555
CVE-2022-49555
High 7.8
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Use del_timer_sync() before freeing While looking at a crash report on a timer list being corrupted, which usually happens when a timer is freed while still active. This is commonly triggered by code calling del_timer() instead of del_timer_sync() just before freeing. One possible culprit is the hci_qca driver, which does exactly that. Eric mentioned that wake_retrans_timer could be rearmed via the work queue, so also move the destruction of the work queue before del_timer_sync().
Affected products and versions
| linux | linux_kernel · 4.3 → 5.10.120 |
|---|---|
| linux | linux_kernel · 5.11 → 5.15.45 |
| linux | linux_kernel · 5.16 → 5.17.13 |
| linux | linux_kernel · 5.18 → 5.18.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.