CVE-2022-3619

high

Published 2023-05-09 · Modified 2023-05-11

CVSS v3

—

CVSS v2

—

VIR risk

8.0

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211918 is the identifier assigned to this vulnerability.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2023-2148.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2023-2458.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2177371

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2165741

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2147364

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2139610

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134380

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133490

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2107924

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2106830

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2089701

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2073091

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2023-2736.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2023:2736

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2023-2951.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2180936

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2176192

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2168297

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2168246

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2165721

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2162120

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2160023

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2154235

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2154171

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2151270

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2150999

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2150979

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2150960

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2150947

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2144720

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2143943

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2143893

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2137979

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134528

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134517

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134506

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134451

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2134377

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133483

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2130141

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2127985

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2124788

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2123056

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2122960

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2122228

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2114937

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2108696

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2108691

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2090723

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2085300

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2084125

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2078466

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2061703

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2055499

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2023:2951

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-3619

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-3619.html

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2023:2458

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2023:2148

Mitigation details

Source: Red Hat Errata — Red Hat Inc. · View original ↗ · Open-Errata-API

Description kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c Red Hat statement To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth…

Workaround

as the kernel will not detect Bluetooth hardware on the system.

Description

kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c

Red Hat statement

To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the customer portal at https://access.redhat.com/solutions/268293. Alternatively, bluetooth can be disabled within the hardware or at the BIOS level, which will also provide effective mitigation as the kernel will not detect Bluetooth hardware on the system.

CVSS v3: 4.3 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Errata / fixed releases

Product	Package	Advisory	Released
Red Hat Enterprise Linux 8	`kernel-rt-0:4.18.0-477.10.1.rt7.274.el8_8`	RHSA-2023:2736	2023-05-16T00:00:00Z
Red Hat Enterprise Linux 8	`kernel-0:4.18.0-477.10.1.el8_8`	RHSA-2023:2951	2023-05-16T00:00:00Z
Red Hat Enterprise Linux 8.6 Extended Update Support	`kernel-0:4.18.0-372.91.1.el8_6`	RHSA-2024:0724	2024-02-07T00:00:00Z
Red Hat Enterprise Linux 9	`kernel-0:5.14.0-284.11.1.el9_2`	RHSA-2023:2458	2023-05-09T00:00:00Z
Red Hat Enterprise Linux 9	`kernel-rt-0:5.14.0-284.11.1.rt14.296.el9_2`	RHSA-2023:2148	2023-05-09T00:00:00Z
Red Hat Enterprise Linux 9	`kernel-0:5.14.0-284.11.1.el9_2`	RHSA-2023:2458	2023-05-09T00:00:00Z
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	`kernel-0:4.18.0-372.91.1.el8_6`	RHSA-2024:0724	2024-02-07T00:00:00Z

Package state

Product	Package	State
Red Hat Enterprise Linux 6	`kernel`	Out of support scope
Red Hat Enterprise Linux 7	`kernel`	Out of support scope
Red Hat Enterprise Linux 7	`kernel-rt`	Out of support scope

Apply commands

bash fix

Apply RHSA-2023:2736 for Red Hat Enterprise Linux 8

yum update -y kernel-rt
# or:
dnf upgrade -y kernel-rt

OS impact

OS	Version	Status	Fixed in
arch		fixed	`6.2-1`
rhel	9	fixed
sles		affected
debian	bookworm	fixed	`6.0.8-1`
debian	bullseye	fixed	`0`
debian	forky	fixed	`6.0.8-1`
debian	sid	fixed	`6.0.8-1`
debian	trixie	fixed	`6.0.8-1`
almalinux	8	fixed	`kernel-doc-4.18.0-477.10.1.el8_8.noarch.rpm`

References

Verify integrity in audit chain (admin only). AS-IS.