CVE-2022-50419 (GCVE-0-2022-50419)

Vulnerability from cvelistv5 – Published: 2025-09-18 16:04 – Updated: 2026-08-05 08:58
VLAI
Title
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times device_add shall not be called multiple times as stated in its documentation: 'Do not call this routine or device_register() more than once for any device structure' Syzkaller reports a bug as follows [1]: ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:33! invalid opcode: 0000 [#1] PREEMPT SMP KASAN [...] Call Trace: <TASK> __list_add include/linux/list.h:69 [inline] list_add_tail include/linux/list.h:102 [inline] kobj_kset_join lib/kobject.c:164 [inline] kobject_add_internal+0x18f/0x8f0 lib/kobject.c:214 kobject_add_varg lib/kobject.c:358 [inline] kobject_add+0x150/0x1c0 lib/kobject.c:410 device_add+0x368/0x1e90 drivers/base/core.c:3452 hci_conn_add_sysfs+0x9b/0x1b0 net/bluetooth/hci_sysfs.c:53 hci_le_cis_estabilished_evt+0x57c/0xae0 net/bluetooth/hci_event.c:6799 hci_le_meta_evt+0x2b8/0x510 net/bluetooth/hci_event.c:7110 hci_event_func net/bluetooth/hci_event.c:7440 [inline] hci_event_packet+0x63d/0xfd0 net/bluetooth/hci_event.c:7495 hci_rx_work+0xae7/0x1230 net/bluetooth/hci_core.c:4007 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 </TASK>
Severity
8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-14 19:11 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 4bcefec3636208b4c97536b26014d5935d5c10a0 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 6144423712d570247b8ca26e50a277c30dd13702 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 671fee73e08ff415d36a7c16bdf238927df83884 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 6e85d2ad958c6f034b1b158d904019869dbb3c81 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 7b674dce4162bb46d396586e30e4653427023875 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 3423a50fa018e88aed4c900d59c3c8334d8ad583 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < ef055094df4c10b73cfe67c8d43f9de1fb608a8b (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 1b6c89571f453101251201f0fad1c26f7256e937 (git)
Affected: b219e3ac66183fc9771b94af931fb5fd41d586ec , < 448a496f760664d3e2e79466aa1787e6abc922b5 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.19
Unaffected: 0 , < 2.6.19 (semver)
Unaffected: 4.9.331 , ≤ 4.9.* (semver)
Unaffected: 4.14.296 , ≤ 4.14.* (semver)
Unaffected: 4.19.262 , ≤ 4.19.* (semver)
Unaffected: 5.4.220 , ≤ 5.4.* (semver)
Unaffected: 5.10.150 , ≤ 5.10.* (semver)
Unaffected: 5.15.75 , ≤ 5.15.* (semver)
Unaffected: 5.19.17 , ≤ 5.19.* (semver)
Unaffected: 6.0.3 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-50419",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T19:11:20.804878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-415",
                "description": "CWE-415 Double Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:13:10.240Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4bcefec3636208b4c97536b26014d5935d5c10a0",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "6144423712d570247b8ca26e50a277c30dd13702",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "671fee73e08ff415d36a7c16bdf238927df83884",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "6e85d2ad958c6f034b1b158d904019869dbb3c81",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "7b674dce4162bb46d396586e30e4653427023875",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "3423a50fa018e88aed4c900d59c3c8334d8ad583",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "ef055094df4c10b73cfe67c8d43f9de1fb608a8b",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "1b6c89571f453101251201f0fad1c26f7256e937",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            },
            {
              "lessThan": "448a496f760664d3e2e79466aa1787e6abc922b5",
              "status": "affected",
              "version": "b219e3ac66183fc9771b94af931fb5fd41d586ec",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "lessThan": "2.6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.331",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.296",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.262",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.220",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.150",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.331",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.296",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.262",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.220",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.150",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.75",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.17",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.3",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sysfs: Fix attempting to call device_add multiple times\n\ndevice_add shall not be called multiple times as stated in its\ndocumentation:\n\n \u0027Do not call this routine or device_register() more than once for\n any device structure\u0027\n\nSyzkaller reports a bug as follows [1]:\n------------[ cut here ]------------\nkernel BUG at lib/list_debug.c:33!\ninvalid opcode: 0000 [#1] PREEMPT SMP KASAN\n[...]\nCall Trace:\n \u003cTASK\u003e\n __list_add include/linux/list.h:69 [inline]\n list_add_tail include/linux/list.h:102 [inline]\n kobj_kset_join lib/kobject.c:164 [inline]\n kobject_add_internal+0x18f/0x8f0 lib/kobject.c:214\n kobject_add_varg lib/kobject.c:358 [inline]\n kobject_add+0x150/0x1c0 lib/kobject.c:410\n device_add+0x368/0x1e90 drivers/base/core.c:3452\n hci_conn_add_sysfs+0x9b/0x1b0 net/bluetooth/hci_sysfs.c:53\n hci_le_cis_estabilished_evt+0x57c/0xae0 net/bluetooth/hci_event.c:6799\n hci_le_meta_evt+0x2b8/0x510 net/bluetooth/hci_event.c:7110\n hci_event_func net/bluetooth/hci_event.c:7440 [inline]\n hci_event_packet+0x63d/0xfd0 net/bluetooth/hci_event.c:7495\n hci_rx_work+0xae7/0x1230 net/bluetooth/hci_core.c:4007\n process_one_work+0x991/0x1610 kernel/workqueue.c:2289\n worker_thread+0x665/0x1080 kernel/workqueue.c:2436\n kthread+0x2e4/0x3a0 kernel/kthread.c:376\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\n \u003c/TASK\u003e"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The vulnerable path is Bluetooth HCI event handling (hci_le_cis_estabilished_evt \u2192 hci_conn_add_sysfs) reached when establishing LE Audio/CIS or related links with a nearby Bluetooth peer/controller, so exploitation requires adjacency rather than local shell or routable network access.\nAC:L - An attacker who can drive the HCI event sequence (malicious/buggy controller, or duplicate CIS Established / handle-colliding events) triggers the double device_add reliably; no race or attacker-uncontrollable timing is required.\nPR:N - A nearby Bluetooth peer needs no account or capability on the victim host; connection acceptance is performed by the victim\u2019s normal Bluetooth/LE Audio stack, not by attacker-held OS privileges.\nUI:N - Once Bluetooth is enabled and reachable for CIS/LE connections (common on phones and audio devices), the kernel processes the HCI events asynchronously without further victim action.\nS:U - Impact stays within the host kernel Bluetooth/driver-model authority; this is not a VM escape, IOMMU bypass, or other cross-scope boundary violation.\nC:H - Double device_add corrupts the kobject kset linked list; without list-debug BUG paths this is kernel memory corruption that can be leveraged for arbitrary read primitives, so confidentiality is High.\nI:H - The same list corruption yields classic unlink/write primitives against kernel list pointers, enabling integrity compromise and potential code execution under the required higher-severity rule.\nA:H - With list debugging the double add hits a kernel BUG/oops; without it, corrupted kset lists still cause crashes or hangs when devices are walked or removed, so availability is High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:58:43.597Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4bcefec3636208b4c97536b26014d5935d5c10a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/6144423712d570247b8ca26e50a277c30dd13702"
        },
        {
          "url": "https://git.kernel.org/stable/c/671fee73e08ff415d36a7c16bdf238927df83884"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e85d2ad958c6f034b1b158d904019869dbb3c81"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b674dce4162bb46d396586e30e4653427023875"
        },
        {
          "url": "https://git.kernel.org/stable/c/3423a50fa018e88aed4c900d59c3c8334d8ad583"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef055094df4c10b73cfe67c8d43f9de1fb608a8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b6c89571f453101251201f0fad1c26f7256e937"
        },
        {
          "url": "https://git.kernel.org/stable/c/448a496f760664d3e2e79466aa1787e6abc922b5"
        }
      ],
      "title": "Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50419",
    "datePublished": "2025-09-18T16:04:02.152Z",
    "dateReserved": "2025-09-17T14:53:07.003Z",
    "dateUpdated": "2026-08-05T08:58:43.597Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-50419",
      "date": "2026-09-15",
      "epss": "0.00235",
      "percentile": "0.14596"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-50419\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-18T16:15:45.353\",\"lastModified\":\"2026-08-04T10:18:16.147\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: hci_sysfs: Fix attempting to call device_add multiple times\\n\\ndevice_add shall not be called multiple times as stated in its\\ndocumentation:\\n\\n \u0027Do not call this routine or device_register() more than once for\\n any device structure\u0027\\n\\nSyzkaller reports a bug as follows [1]:\\n------------[ cut here ]------------\\nkernel BUG at lib/list_debug.c:33!\\ninvalid opcode: 0000 [#1] PREEMPT SMP KASAN\\n[...]\\nCall Trace:\\n \u003cTASK\u003e\\n __list_add include/linux/list.h:69 [inline]\\n list_add_tail include/linux/list.h:102 [inline]\\n kobj_kset_join lib/kobject.c:164 [inline]\\n kobject_add_internal+0x18f/0x8f0 lib/kobject.c:214\\n kobject_add_varg lib/kobject.c:358 [inline]\\n kobject_add+0x150/0x1c0 lib/kobject.c:410\\n device_add+0x368/0x1e90 drivers/base/core.c:3452\\n hci_conn_add_sysfs+0x9b/0x1b0 net/bluetooth/hci_sysfs.c:53\\n hci_le_cis_estabilished_evt+0x57c/0xae0 net/bluetooth/hci_event.c:6799\\n hci_le_meta_evt+0x2b8/0x510 net/bluetooth/hci_event.c:7110\\n hci_event_func net/bluetooth/hci_event.c:7440 [inline]\\n hci_event_packet+0x63d/0xfd0 net/bluetooth/hci_event.c:7495\\n hci_rx_work+0xae7/0x1230 net/bluetooth/hci_core.c:4007\\n process_one_work+0x991/0x1610 kernel/workqueue.c:2289\\n worker_thread+0x665/0x1080 kernel/workqueue.c:2436\\n kthread+0x2e4/0x3a0 kernel/kthread.c:376\\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\\n \u003c/TASK\u003e\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/bluetooth/hci_sysfs.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"4bcefec3636208b4c97536b26014d5935d5c10a0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"6144423712d570247b8ca26e50a277c30dd13702\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"671fee73e08ff415d36a7c16bdf238927df83884\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"6e85d2ad958c6f034b1b158d904019869dbb3c81\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"7b674dce4162bb46d396586e30e4653427023875\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"3423a50fa018e88aed4c900d59c3c8334d8ad583\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"ef055094df4c10b73cfe67c8d43f9de1fb608a8b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"1b6c89571f453101251201f0fad1c26f7256e937\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b219e3ac66183fc9771b94af931fb5fd41d586ec\",\"lessThan\":\"448a496f760664d3e2e79466aa1787e6abc922b5\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/bluetooth/hci_sysfs.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.331\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.296\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.262\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.220\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.150\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.75\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.19.17\",\"lessThanOrEqual\":\"5.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0.3\",\"lessThanOrEqual\":\"6.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-14T19:11:20.804878Z\",\"id\":\"CVE-2022-50419\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.19\",\"versionEndExcluding\":\"4.9.331\",\"matchCriteriaId\":\"C848BD51-F039-4CDE-AE34-AC9D635BDD68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.296\",\"matchCriteriaId\":\"1927ABC6-E0D2-478F-B103-B982A42D1158\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.262\",\"matchCriteriaId\":\"D6B62970-1FAD-4ED6-930A-23E26A8D2E08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.220\",\"matchCriteriaId\":\"125F7133-B3B7-4175-8CF3-FF0845483254\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.150\",\"matchCriteriaId\":\"C495821C-2A71-4F09-BED8-6A6EB4C9BA27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.75\",\"matchCriteriaId\":\"6D945F46-F32F-4C09-8400-C3477E22A9FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.19.17\",\"matchCriteriaId\":\"19B4C3A4-E5C3-41DC-BB14-BE72858E7D35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0\",\"versionEndExcluding\":\"6.0.3\",\"matchCriteriaId\":\"5BCD8201-B847-4442-B894-70D430128DEF\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1b6c89571f453101251201f0fad1c26f7256e937\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3423a50fa018e88aed4c900d59c3c8334d8ad583\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/448a496f760664d3e2e79466aa1787e6abc922b5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4bcefec3636208b4c97536b26014d5935d5c10a0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6144423712d570247b8ca26e50a277c30dd13702\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/671fee73e08ff415d36a7c16bdf238927df83884\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6e85d2ad958c6f034b1b158d904019869dbb3c81\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7b674dce4162bb46d396586e30e4653427023875\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ef055094df4c10b73cfe67c8d43f9de1fb608a8b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T21:49:52+00:00",
      "cve": "CVE-2022-50419",
      "id": "CVE-2022-50419",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50419.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T02:21:16Z",
      "cve": "CVE-2022-50419",
      "id": "CVE-2022-50419",
      "initial_release_date": "2025-09-18T23:42:49Z",
      "product_status:known_affected": "491",
      "product_status:known_not_affected": "176",
      "product_status:recommended": "310",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-50419",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-50419.json",
      "version": "47"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-50419\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T19:11:20.804878Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-415\", \"description\": \"CWE-415 Double Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T19:11:16.271Z\"}}], \"cna\": {\"title\": \"Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"4bcefec3636208b4c97536b26014d5935d5c10a0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"6144423712d570247b8ca26e50a277c30dd13702\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"671fee73e08ff415d36a7c16bdf238927df83884\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"6e85d2ad958c6f034b1b158d904019869dbb3c81\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"7b674dce4162bb46d396586e30e4653427023875\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"3423a50fa018e88aed4c900d59c3c8334d8ad583\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"ef055094df4c10b73cfe67c8d43f9de1fb608a8b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"1b6c89571f453101251201f0fad1c26f7256e937\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b219e3ac66183fc9771b94af931fb5fd41d586ec\", \"lessThan\": \"448a496f760664d3e2e79466aa1787e6abc922b5\", \"versionType\": \"git\"}], \"programFiles\": [\"net/bluetooth/hci_sysfs.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.19\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.19\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.9.331\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.296\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.262\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.220\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.150\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.75\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"5.19.17\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.19.*\"}, {\"status\": \"unaffected\", \"version\": \"6.0.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/bluetooth/hci_sysfs.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/4bcefec3636208b4c97536b26014d5935d5c10a0\"}, {\"url\": \"https://git.kernel.org/stable/c/6144423712d570247b8ca26e50a277c30dd13702\"}, {\"url\": \"https://git.kernel.org/stable/c/671fee73e08ff415d36a7c16bdf238927df83884\"}, {\"url\": \"https://git.kernel.org/stable/c/6e85d2ad958c6f034b1b158d904019869dbb3c81\"}, {\"url\": \"https://git.kernel.org/stable/c/7b674dce4162bb46d396586e30e4653427023875\"}, {\"url\": \"https://git.kernel.org/stable/c/3423a50fa018e88aed4c900d59c3c8334d8ad583\"}, {\"url\": \"https://git.kernel.org/stable/c/ef055094df4c10b73cfe67c8d43f9de1fb608a8b\"}, {\"url\": \"https://git.kernel.org/stable/c/1b6c89571f453101251201f0fad1c26f7256e937\"}, {\"url\": \"https://git.kernel.org/stable/c/448a496f760664d3e2e79466aa1787e6abc922b5\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: hci_sysfs: Fix attempting to call device_add multiple times\\n\\ndevice_add shall not be called multiple times as stated in its\\ndocumentation:\\n\\n \u0027Do not call this routine or device_register() more than once for\\n any device structure\u0027\\n\\nSyzkaller reports a bug as follows [1]:\\n------------[ cut here ]------------\\nkernel BUG at lib/list_debug.c:33!\\ninvalid opcode: 0000 [#1] PREEMPT SMP KASAN\\n[...]\\nCall Trace:\\n \u003cTASK\u003e\\n __list_add include/linux/list.h:69 [inline]\\n list_add_tail include/linux/list.h:102 [inline]\\n kobj_kset_join lib/kobject.c:164 [inline]\\n kobject_add_internal+0x18f/0x8f0 lib/kobject.c:214\\n kobject_add_varg lib/kobject.c:358 [inline]\\n kobject_add+0x150/0x1c0 lib/kobject.c:410\\n device_add+0x368/0x1e90 drivers/base/core.c:3452\\n hci_conn_add_sysfs+0x9b/0x1b0 net/bluetooth/hci_sysfs.c:53\\n hci_le_cis_estabilished_evt+0x57c/0xae0 net/bluetooth/hci_event.c:6799\\n hci_le_meta_evt+0x2b8/0x510 net/bluetooth/hci_event.c:7110\\n hci_event_func net/bluetooth/hci_event.c:7440 [inline]\\n hci_event_packet+0x63d/0xfd0 net/bluetooth/hci_event.c:7495\\n hci_rx_work+0xae7/0x1230 net/bluetooth/hci_core.c:4007\\n process_one_work+0x991/0x1610 kernel/workqueue.c:2289\\n worker_thread+0x665/0x1080 kernel/workqueue.c:2436\\n kthread+0x2e4/0x3a0 kernel/kthread.c:376\\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\\n \u003c/TASK\u003e\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.331\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.296\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.262\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.220\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.150\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.75\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.19.17\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.3\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1\", \"versionStartIncluding\": \"2.6.19\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T19:19:07.765Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-50419\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T19:19:07.765Z\", \"dateReserved\": \"2025-09-17T14:53:07.003Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-18T16:04:02.152Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.