CVE-2022-49116

Bluetooth: use memset avoid memory leaks

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use memset avoid memory leaks

Use memset to initialize structs to prevent memory leaks in l2cap_ecred_connect

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	da49b602f7f75ccc91386e1274b3ef71676cd092 to before 9567d54e70ff58c2695c2cc2e53c86c67551d3e6Affected da49b602f7f75ccc91386e1274b3ef71676cd092 to before 42b6a39f439b6f37cc2024d91ce547d83290ff78Affected da49b602f7f75ccc91386e1274b3ef71676cd092 to before e9e55acee9b7a737ec7f5161b94a78932a5514c8Affected da49b602f7f75ccc91386e1274b3ef71676cd092 to before d588c183a971b85c775ad66da563ee6e8bc8158fAffected da49b602f7f75ccc91386e1274b3ef71676cd092 to before d3715b2333e9a21692ba16ef8645eda584a9515dAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

da49b602f7f75ccc91386e1274b3ef71676cd092 to before 9567d54e70ff58c2695c2cc2e53c86c67551d3e6Affected
da49b602f7f75ccc91386e1274b3ef71676cd092 to before 42b6a39f439b6f37cc2024d91ce547d83290ff78Affected
da49b602f7f75ccc91386e1274b3ef71676cd092 to before e9e55acee9b7a737ec7f5161b94a78932a5514c8Affected
da49b602f7f75ccc91386e1274b3ef71676cd092 to before d588c183a971b85c775ad66da563ee6e8bc8158fAffected
da49b602f7f75ccc91386e1274b3ef71676cd092 to before d3715b2333e9a21692ba16ef8645eda584a9515dAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.