Back
CVE-2022-49202
Bluetooth: hci_uart: add missing NULL check in h5_enqueue
Medium5.5EPSS 0.26%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection fault in __pm_runtime_resume(). The problem was in missing NULL check. hu->serdev can be NULL and we should not blindly pass &serdev->dev somewhere, since it will cause GPF.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.26% · top 82% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected d9dd833cf6d29695682ec7e7924c0d0992b906bc – < 7235485433d290367d60ae22fcdfc565e61d42ab
- affected d9dd833cf6d29695682ec7e7924c0d0992b906bc – < e6b6c904c0f88588b6a3ace20e4c0d61eab124f8
- affected d9dd833cf6d29695682ec7e7924c0d0992b906bc – < 8a3896c30f542439d36303183dc96f65df8cc528
- affected d9dd833cf6d29695682ec7e7924c0d0992b906bc – < 32cb08e958696908a9aad5e49a78d74f7e32fffb
- affected 5.15
- unaffected < 5.15
- unaffected 5.15.33 – ≤ 5.15.*
- unaffected 5.16.19 – ≤ 5.16.*
- unaffected 5.17.2 – ≤ 5.17.*
- unaffected 5.18 – ≤ *
References (4)
- https://git.kernel.org/stable/c/7235485433d290367d60ae22fcdfc565e61d42ab (opens in a new tab)
- https://git.kernel.org/stable/c/e6b6c904c0f88588b6a3ace20e4c0d61eab124f8 (opens in a new tab)
- https://git.kernel.org/stable/c/8a3896c30f542439d36303183dc96f65df8cc528 (opens in a new tab)
- https://git.kernel.org/stable/c/32cb08e958696908a9aad5e49a78d74f7e32fffb (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49202)Record last updated .