Skip to main content

NULL Pointer Dereference

CVE-2022-3563

Medium
5.7/10

Summary

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function "read_50_controller_cap_complete" of the file "tools/mgmt-tester.c" of the component BlueZ. The manipulation of the argument "cap_len" leads to NULL Pointer Dereference. This vulnerability affects bluez package versions prior to 5.65. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

  • LOW
  • ADJACENT_NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published