{
   "containers": {
      "cna": {
         "providerMetadata": {
            "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038"
         },
         "descriptions": [
            {
               "lang": "en",
               "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix not cleanup led when bt_init fails\n\nbt_init() calls bt_leds_init() to register led, but if it fails later,\nbt_leds_cleanup() is not called to unregister it.\n\nThis can cause panic if the argument \"bluetooth-power\" in text is freed\nand then another led_trigger_register() tries to access it:\n\nBUG: unable to handle page fault for address: ffffffffc06d3bc0\nRIP: 0010:strcmp+0xc/0x30\n  Call Trace:\n    <TASK>\n    led_trigger_register+0x10d/0x4f0\n    led_trigger_register_simple+0x7d/0x100\n    bt_init+0x39/0xf7 [bluetooth]\n    do_one_initcall+0xd0/0x4e0"
            }
         ],
         "affected": [
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "unaffected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "net/bluetooth/af_bluetooth.c"
               ],
               "versions": [
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "8a66c3a94285",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "2c6cf0afc385",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "e7b950458156",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "edf7284a9829",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "5ecf7cd6fde5",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "e64c97b53bc6",
                     "lessThan": "2f3957c7eb4e",
                     "status": "affected",
                     "versionType": "git"
                  }
               ]
            },
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "affected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "net/bluetooth/af_bluetooth.c"
               ],
               "versions": [
                  {
                     "version": "4.9",
                     "status": "affected"
                  },
                  {
                     "version": "0",
                     "lessThan": "4.9",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "4.19.269",
                     "lessThanOrEqual": "4.19.*",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "5.4.227",
                     "lessThanOrEqual": "5.4.*",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "5.10.159",
                     "lessThanOrEqual": "5.10.*",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "5.15.83",
                     "lessThanOrEqual": "5.15.*",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "6.0.13",
                     "lessThanOrEqual": "6.0.*",
                     "status": "unaffected",
                     "versionType": "custom"
                  },
                  {
                     "version": "6.1",
                     "lessThanOrEqual": "*",
                     "status": "unaffected",
                     "versionType": "original_commit_for_fix"
                  }
               ]
            }
         ],
         "references": [
            {
               "url": "https://git.kernel.org/stable/c/8a66c3a94285552f6a8e45d73b34ebbad11d388b"
            },
            {
               "url": "https://git.kernel.org/stable/c/2c6cf0afc3856359e620e96edd952457d258e16c"
            },
            {
               "url": "https://git.kernel.org/stable/c/e7b950458156d410509a08c41930b75e72985938"
            },
            {
               "url": "https://git.kernel.org/stable/c/edf7284a98296369dd0891a0457eec37df244873"
            },
            {
               "url": "https://git.kernel.org/stable/c/5ecf7cd6fde5e72c87122084cf00d63e35d8dd9f"
            },
            {
               "url": "https://git.kernel.org/stable/c/2f3957c7eb4e07df944169a3e50a4d6790e1c744"
            }
         ],
         "title": "Bluetooth: Fix not cleanup led when bt_init fails",
         "x_generator": {
            "engine": "bippy-c9c4e1df01b2"
         }
      }
   },
   "cveMetadata": {
      "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038",
      "cveID": "CVE-2022-48971",
      "requesterUserId": "gregkh@kernel.org",
      "serial": "1",
      "state": "PUBLISHED"
   },
   "dataType": "CVE_RECORD",
   "dataVersion": "5.0"
}
