CVE-2022-3563: Bluez

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Affected products

• Bluez Bluez: before 5.65 (fixed in 5.65)

Published 2022-10-17. Last modified 2026-06-17.