{"id":"CVE-2022-3637","aliases":["BELL-CVE-2022-3637","EUVD-2022-42997","GHSA-fm4c-gvmr-hvgr","UBUNTU-CVE-2022-3637"],"status":"published","title":"Linux Kernel BlueZ jlink.c jlink_init denial of service","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","severity":{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0029,"percentile":0.21732,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2022-10-21T00:00:00Z","modified":"2026-10-28T02:30:23Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2","5.37-0ubuntu5.3+esm3","5.37-0ubuntu5.3+esm4","5.37-0ubuntu5.3+esm5","5.37-0ubuntu5.3+esm6"]}],"products":[{"vendor":"bluez","product":"bluez"},{"vendor":"linux","product":"kernel"}],"references":[{"url":"https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f","tags":["x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://vuldb.com/?id.211936","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3637","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fm4c-gvmr-hvgr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3637","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3637.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3637","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-3637","title":"Linux Kernel BlueZ jlink.c jlink_init denial of service","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T00:00:00Z","modified":"2025-04-15T13:24:57.854Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-42997","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T00:00:00Z","modified":"2025-04-15T13:24:57Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:52:31.065409Z"}],"ghsa":[{"id":"GHSA-fm4c-gvmr-hvgr","title":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability...","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T12:00:15Z","modified":"2023-01-27T05:02:38Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:42:04.742793Z"}],"nvd":[{"id":"CVE-2022-3637","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T11:15:09.7Z","modified":"2026-06-17T04:59:55.8Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:30.6869Z"}],"osv":[{"id":"BELL-CVE-2022-3637","title":"CVE-2022-3637 does not affect BellSoft software","status":"withdrawn","published":"2022-10-21T11:15:00Z","modified":"2026-01-26T09:47:59.093967Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3637","title":"Linux Kernel BlueZ jlink.c jlink_init denial of service","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T00:00:00Z","modified":"2026-10-28T02:30:23.705451769Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"UBUNTU-CVE-2022-3637","description":"A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.","status":"published","published":"2022-10-21T11:15:00Z","modified":"2026-10-09T01:45:18.153690753Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"}]}}