---
id: CVE-2022-42895
title: "There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.\nWe recommend upgrading past commit\_ https://github.com/torvalds/linux…"
summary: "There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.\nWe recommend upgrading past commit\_ https://github.com/torvalds/linux…"
severity: medium
cvss: 5.1
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-824
  - CWE-824
vendor: linux
product: linux_kernel
affected:
  - linux_kernel
published: '2022-11-23'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:16:52.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-42895'
references:
  - url: >-
      https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
    label: cve-coordination@google.com
  - url: 'https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e'
    label: cve-coordination@google.com
  - url: >-
      https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00413
epssPercentile: 0.34004
ingestedAt: '2026-10-14T19:49:57.524Z'
---

## Overview

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.
We recommend upgrading past commit  https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url 



## Affected

- `linux_kernel`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.