CVE catalog

CVE-2022-3563

bluez: CVE-2022-3563

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbluezsid5.87-5fixed
Debianbluezforky5.87-5fixed
Debianblueztrixie5.82-1.1fixed
Debianbluezbookworm5.66-1+deb12u2fixed
Debianbluezbookworm-security5.66-1+deb12u1fixed
Ubuntubluezpro5.46-0ubuntu3vulnerable
Ubuntubluezpro5.46-0ubuntu4vulnerable
Ubuntubluezpro5.48-0ubuntu3vulnerable
Ubuntubluezpro5.48-0ubuntu3.1vulnerable
Ubuntubluezpro5.48-0ubuntu3.2vulnerable
Ubuntubluezpro5.48-0ubuntu3.3vulnerable
Ubuntubluezpro5.48-0ubuntu3.4vulnerable
Ubuntubluezpro5.48-0ubuntu3.5vulnerable
Ubuntubluezpro5.48-0ubuntu3.6vulnerable
Ubuntubluezpro5.48-0ubuntu3.7vulnerable
Ubuntubluezpro5.48-0ubuntu3.8vulnerable
Ubuntubluezpro5.48-0ubuntu3.9vulnerable
Ubuntubluezpro5.48-0ubuntu3.9+esm1vulnerable
Ubuntubluezpro5.48-0ubuntu3.9+esm2fixed
Ubuntubluez20.045.50-0ubuntu4vulnerable
Ubuntubluez20.045.51-0ubuntu1vulnerable
Ubuntubluez20.045.51-0ubuntu2vulnerable
Ubuntubluez20.045.52-0ubuntu1vulnerable
Ubuntubluez20.045.52-0ubuntu2vulnerable
Ubuntubluez20.045.53-0ubuntu1vulnerable
Ubuntubluez20.045.53-0ubuntu2vulnerable
Ubuntubluez20.045.53-0ubuntu3vulnerable
Ubuntubluez20.045.53-0ubuntu3.1vulnerable
Ubuntubluez20.045.53-0ubuntu3.2vulnerable
Ubuntubluez20.045.53-0ubuntu3.3vulnerable
Ubuntubluez20.045.53-0ubuntu3.4vulnerable
Ubuntubluez20.045.53-0ubuntu3.5vulnerable
Ubuntubluez20.045.53-0ubuntu3.6vulnerable
Ubuntubluez20.045.53-0ubuntu3.7vulnerable
Ubuntubluez20.045.53-0ubuntu3.8fixed
Ubuntubluez22.045.60-0ubuntu2vulnerable
Ubuntubluez22.045.62-0ubuntu1vulnerable
Ubuntubluez22.045.62-0ubuntu2vulnerable
Ubuntubluez22.045.63-0ubuntu1vulnerable
Ubuntubluez22.045.63-0ubuntu2vulnerable
Ubuntubluez22.045.64-0ubuntu1vulnerable
Ubuntubluez22.045.64-0ubuntu1.1vulnerable
Ubuntubluez22.045.64-0ubuntu1.3fixed
Ubuntubluezpro5.35-0ubuntu2vulnerable
Ubuntubluezpro5.36-0ubuntu1vulnerable
Ubuntubluezpro5.37-0ubuntu5vulnerable
Ubuntubluezpro5.37-0ubuntu5.1vulnerable
Ubuntubluezpro5.37-0ubuntu5.3vulnerable
Ubuntubluezpro5.37-0ubuntu5.3+esm1vulnerable
Ubuntubluezpro5.37-0ubuntu5.3+esm2vulnerable
Ubuntubluezpro5.37-0ubuntu5.3+esm3vulnerable
Ubuntubluezpro5.37-0ubuntu5.3+esm4fixed
Ubuntubluez22.045.60-0ubuntu2vulnerable
Ubuntubluez22.045.62-0ubuntu1vulnerable
Ubuntubluez22.045.62-0ubuntu2vulnerable
Ubuntubluez22.045.63-0ubuntu1vulnerable
Ubuntubluez22.045.63-0ubuntu2vulnerable
Ubuntubluez22.045.64-0ubuntu1vulnerable
Ubuntubluez22.045.64-0ubuntu1.1vulnerable
Ubuntubluez22.045.64-0ubuntu1.3fixed
Susebluezlinux enterprise module for basesystem 15 sp45.62-150400.4.8.1fixed
Susebluezlinux enterprise module for desktop applications 15 sp45.62-150400.4.8.1fixed
Susebluezlinux enterprise workstation extension 15 sp45.62-150400.4.8.1fixed
Opensusebluezleap 15.45.62-150400.4.8.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbluezsourcesid5.65-1not yet assignedNot reportedNot reported
Debianbluezsourceforky5.65-1not yet assignedNot reportedNot reported
Debianbluezsourcetrixie5.65-1not yet assignedNot reportedNot reported
Debianbluezsourcebookworm5.65-1not yet assignedNot reportedNot reported
Ubuntubluezdebpro5.48-0ubuntu3.9+esm2Not reportedUSN-6809-1Not reported
Ubuntubluezdeb20.045.53-0ubuntu3.8Not reportedUSN-6809-1Not reported
Ubuntubluezdeb22.045.64-0ubuntu1.3Not reportedUSN-6809-1Not reported
Ubuntubluezdebpro5.37-0ubuntu5.3+esm4Not reportedUBUNTU-CVE-2022-3563Not reported
Ubuntubluezdeb22.045.64-0ubuntu1.3Not reportedUBUNTU-CVE-2022-3563Not reported
Susebluezrpmlinux enterprise module for basesystem 15 sp45.62-150400.4.8.1Not reportedSUSE-SU-2023:0167-1Not reported
Susebluezrpmlinux enterprise module for desktop applications 15 sp45.62-150400.4.8.1Not reportedSUSE-SU-2023:0167-1Not reported
Susebluezrpmlinux enterprise workstation extension 15 sp45.62-150400.4.8.1Not reportedSUSE-SU-2023:0167-1Not reported
Opensusebluezrpmleap 15.45.62-150400.4.8.1Not reportedSUSE-SU-2023:0167-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [bluetooth]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez]Fixed
    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-cups]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-hcidump]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-meshd]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-obexd]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-source]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-test-scripts]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [bluez-test-tools]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [libbluetooth3]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

  • [libbluetooth-dev]Fixed

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.65-1

      dsa · bluez · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]