CVE-2022-3640: Debian Linux

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Linux Linux Kernel: from 4.9.326, before 4.9.333 (fixed in 4.9.333); from 4.14.291, before 4.14.299 (fixed in 4.14.299); from 4.19.255, before 4.19.265 (fixed in 4.19.265); from 5.4.209, before 5.4.224 (fixed in 5.4.224); from 5.10.135, before 5.10.154 (fixed in 5.10.154); from 5.15.59, before 5.15.79 (fixed in 5.15.79); …

Published 2022-10-21. Last modified 2026-06-17.