CVE-2022-49111

A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hci_disconn_phylink_complete_evt() function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a use-after-free scenario, leading to system instability, memory corruption, and potential code execution.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and interaction with an active Bluetooth interface, limiting the attack vector. Standard enterprise server deployments typically lack Bluetooth hardware and do not run Bluetooth services, minimizing exposure under default configurations. On systems where Bluetooth hardware is actively enabled and handled, a local attacker could trigger memory corruption, resulting in a denial of service or unexpected kernel state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.