CVE-2022-48971

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-48971
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48971.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48971
Downstream
Related
Published
2024-10-21T20:05:52.363Z
Modified
2026-04-11T12:43:21.545472Z
Summary
Bluetooth: Fix not cleanup led when bt_init fails
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix not cleanup led when bt_init fails

btinit() calls btledsinit() to register led, but if it fails later, btleds_cleanup() is not called to unregister it.

This can cause panic if the argument "bluetooth-power" in text is freed and then another ledtriggerregister() tries to access it:

BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> ledtriggerregister+0x10d/0x4f0 ledtriggerregistersimple+0x7d/0x100 btinit+0x39/0xf7 [bluetooth] dooneinitcall+0xd0/0x4e0

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48971.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e64c97b53bc6727aa4385535166aaa047281e02d
Fixed
8a66c3a94285552f6a8e45d73b34ebbad11d388b
Fixed
2c6cf0afc3856359e620e96edd952457d258e16c
Fixed
e7b950458156d410509a08c41930b75e72985938
Fixed
edf7284a98296369dd0891a0457eec37df244873
Fixed
5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f
Fixed
2f3957c7eb4e07df944169a3e50a4d6790e1c744

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48971.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
4.19.269
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.227
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.159
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.83
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.13

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48971.json"