01 Record

CVE-2022-50419

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 15.0% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-18 16:04Z1 YR AGO

Last updated

2026-08-05 08:58Z2 MO AGO

Reserved

2025-09-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-415Double FreeVariant
CWE-672Operation on a Resource after Expiration or ReleaseClass

Data version

5.2

Document digest

e7a2c33258a742cd39433939f32cb0b8adeac9984fcc833b2b18de0333ecda97

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb219e3ac66183fc9771b94af931fb5fd41d586ec to < 4bcefec3636208b4c97536b26014d5935d5c10a0, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 6144423712d570247b8ca26e50a277c30dd13702, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 671fee73e08ff415d36a7c16bdf238927df83884, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 6e85d2ad958c6f034b1b158d904019869dbb3c81, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 7b674dce4162bb46d396586e30e4653427023875, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 3423a50fa018e88aed4c900d59c3c8334d8ad583, b219e3ac66183fc9771b94af931fb5fd41d586ec to < ef055094df4c10b73cfe67c8d43f9de1fb608a8b, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 1b6c89571f453101251201f0fad1c26f7256e937, b219e3ac66183fc9771b94af931fb5fd41d586ec to < 448a496f760664d3e2e79466aa1787e6abc922b5, 2.6.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/4bcefec3636208b4c97536b26014d5935d5c10a0
git.kernel.orghttps://git.kernel.org/stable/c/6144423712d570247b8ca26e50a277c30dd13702
git.kernel.orghttps://git.kernel.org/stable/c/671fee73e08ff415d36a7c16bdf238927df83884
git.kernel.orghttps://git.kernel.org/stable/c/6e85d2ad958c6f034b1b158d904019869dbb3c81
git.kernel.orghttps://git.kernel.org/stable/c/7b674dce4162bb46d396586e30e4653427023875
git.kernel.orghttps://git.kernel.org/stable/c/3423a50fa018e88aed4c900d59c3c8334d8ad583
git.kernel.orghttps://git.kernel.org/stable/c/ef055094df4c10b73cfe67c8d43f9de1fb608a8b
git.kernel.orghttps://git.kernel.org/stable/c/1b6c89571f453101251201f0fad1c26f7256e937
git.kernel.orghttps://git.kernel.org/stable/c/448a496f760664d3e2e79466aa1787e6abc922b5

07 Fixed in

Debian 12

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.