CVE-2022-48971

Bluetooth: Fix not cleanup led when bt_init fails

MEDIUM

5.5

CVSS Score

Published: October 21, 2024 at 08:05 PM UTC

Updated: June 17, 2026 at 05:16 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is not called to unregister it. This can cause panic if the argument "bluetooth-power" in text is freed and then another led_trigger_register() tries to access it: BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0 led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.20 ≤ v < 5.4.2274.9 ≤ v < 4.19.2694.9 ≤ v < 5.10.1594.9 ≤ v < 5.15.834.9 ≤ v < 5.4.2274.9 ≤ v < 6.0.134.9 ≤ v < 6.15.11 ≤ v < 5.15.835.16 ≤ v < 6.0.135.5 ≤ v < 5.10.1596.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4 6.1 rc5 6.1 rc6 6.1 rc7 6.1 rc8e64c97b53bc6727aa4385535166aaa047281e02d

Vendor states this is fixed in 2c6cf0afc3856359e620e96edd952457d258e16c (fixed)

Vendor states this is fixed in 2f3957c7eb4e07df944169a3e50a4d6790e1c744 (fixed)

Vendor states this is fixed in 5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f (fixed)

Vendor states this is fixed in 8a66c3a94285552f6a8e45d73b34ebbad11d388b (fixed)

Vendor states this is fixed in e7b950458156d410509a08c41930b75e72985938 (fixed)

Vendor states this is fixed in edf7284a98296369dd0891a0457eec37df244873 (fixed)

Vendor states this is fixed in 4.19.269 (unaffected)

Vendor states this is fixed in 4.9 (unaffected)

Vendor states this is fixed in 5.10.159 (unaffected)

Vendor states this is fixed in 5.15.83 (unaffected)

Vendor states this is fixed in 5.4.227 (unaffected)

Vendor states this is fixed in 6.0.13 (unaffected)