NULL pointer dereference in Linux kernel - CVE-2022-3563

Vulnerability identifier: #VU71644

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3563

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the read_50_controller_cap_complete() function in tools/mgmt-tester.c of the component BlueZ. An attacker with physical proximity to device can send specially crafted data to the application and perform a denial of service (DoS) attack.

Linux kernel
Amazon Linux AMI
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension
openSUSE Leap
Ubuntu
libbluetooth3 (Ubuntu package)
bluez (Ubuntu package)
bluez
bluez-devel-32bit
bluez-auto-enable-devices
libbluetooth3-32bit-debuginfo
libbluetooth3-32bit
libbluetooth3-debuginfo
libbluetooth3
bluez-test-debuginfo
bluez-test
bluez-devel
bluez-deprecated-debuginfo
bluez-deprecated
bluez-debugsource
bluez-debuginfo
bluez-cups-debuginfo
bluez-cups
bluez-tests (Ubuntu package)

Install update from vendor's website.

libbluetooth3 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.53-0ubuntu3.8, 5.64-0ubuntu1.3
bluez (Ubuntu package) - addressed in versions Ubuntu Pro, 5.53-0ubuntu3.8, 5.64-0ubuntu1.3
bluez - update to 5.62-2
bluez-devel-32bit - update to 5.62-150400.4.8.1
bluez-auto-enable-devices - update to 5.62-150400.4.8.1
libbluetooth3-32bit-debuginfo - update to 5.62-150400.4.8.1
libbluetooth3-32bit - update to 5.62-150400.4.8.1
bluez - update to 5.62-150400.4.8.1
libbluetooth3-debuginfo - update to 5.62-150400.4.8.1
libbluetooth3 - update to 5.62-150400.4.8.1
bluez-test-debuginfo - update to 5.62-150400.4.8.1
bluez-test - update to 5.62-150400.4.8.1
bluez-devel - update to 5.62-150400.4.8.1
bluez-deprecated-debuginfo - update to 5.62-150400.4.8.1
bluez-deprecated - update to 5.62-150400.4.8.1
bluez-debugsource - update to 5.62-150400.4.8.1
bluez-debuginfo - update to 5.62-150400.4.8.1
bluez-cups-debuginfo - update to 5.62-150400.4.8.1
bluez-cups - update to 5.62-150400.4.8.1
bluez-tests (Ubuntu package) - update to 5.64-0ubuntu1.3

• https://vuldb.com/?id.211086
• https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=e3c92f1f786f0b55440bd908b55894d0c792cf0e

• Denial of service in Linux kernel BlueZ
• SUSE update for bluez
• Ubuntu update for bluez
• Amazon Linux AMI update for bluez