CVE-2022-48971

Bluetooth: Fix not cleanup led when bt_init fails

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix not cleanup led when bt_init fails

bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is not called to unregister it.

This can cause panic if the argument "bluetooth-power" in text is freed and then another led_trigger_register() tries to access it:

BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0 led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e64c97b53bc6727aa4385535166aaa047281e02d to before 8a66c3a94285552f6a8e45d73b34ebbad11d388bAffected e64c97b53bc6727aa4385535166aaa047281e02d to before 2c6cf0afc3856359e620e96edd952457d258e16cAffected e64c97b53bc6727aa4385535166aaa047281e02d to before e7b950458156d410509a08c41930b75e72985938Affected e64c97b53bc6727aa4385535166aaa047281e02d to before edf7284a98296369dd0891a0457eec37df244873Affected e64c97b53bc6727aa4385535166aaa047281e02d to before 5ecf7cd6fde5e72c87122084cf00d63e35d8dd9fAffected e64c97b53bc6727aa4385535166aaa047281e02d to before 2f3957c7eb4e07df944169a3e50a4d6790e1c744Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.19.269 through 4.19.Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

e64c97b53bc6727aa4385535166aaa047281e02d to before 8a66c3a94285552f6a8e45d73b34ebbad11d388bAffected
e64c97b53bc6727aa4385535166aaa047281e02d to before 2c6cf0afc3856359e620e96edd952457d258e16cAffected
e64c97b53bc6727aa4385535166aaa047281e02d to before e7b950458156d410509a08c41930b75e72985938Affected
e64c97b53bc6727aa4385535166aaa047281e02d to before edf7284a98296369dd0891a0457eec37df244873Affected
e64c97b53bc6727aa4385535166aaa047281e02d to before 5ecf7cd6fde5e72c87122084cf00d63e35d8dd9fAffected
e64c97b53bc6727aa4385535166aaa047281e02d to before 2f3957c7eb4e07df944169a3e50a4d6790e1c744Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.19.269 through 4.19.*Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.