{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos7els/vex/2022/cve-2022-3637-els_os-centos7els.json" } ], "tracking": { "current_release_date": "2026-06-12T15:35:40Z", "generator": { "date": "2026-06-12T15:35:40Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2022-3637-ELS_OS-CENTOS7ELS", "initial_release_date": "2022-10-21T11:15:00Z", "revision_history": [ { "date": "2022-10-21T11:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-06-12T15:35:40Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2022-3637" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 7", "product": { "name": "Community Enterprise Operating System 7", "product_id": "CentOS-7", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" }, { "branches": [ { "category": "product_version", "name": "bluez-0:5.44-7.el7.x86_64", "product": { "name": "bluez-0:5.44-7.el7.x86_64", "product_id": "bluez-0:5.44-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez@5.44-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-libs-0:5.44-7.el7.x86_64", "product": { "name": "bluez-libs-0:5.44-7.el7.x86_64", "product_id": "bluez-libs-0:5.44-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-libs@5.44-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-cups-0:5.44-7.el7.x86_64", "product": { "name": "bluez-cups-0:5.44-7.el7.x86_64", "product_id": "bluez-cups-0:5.44-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-cups@5.44-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-libs-devel-0:5.44-7.el7.x86_64", "product": { "name": "bluez-libs-devel-0:5.44-7.el7.x86_64", "product_id": "bluez-libs-devel-0:5.44-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-libs-devel@5.44-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-hid2hci-0:5.44-7.el7.x86_64", "product": { "name": "bluez-hid2hci-0:5.44-7.el7.x86_64", "product_id": "bluez-hid2hci-0:5.44-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-hid2hci@5.44-7.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "bluez-libs-0:5.44-7.el7.i686", "product": { "name": "bluez-libs-0:5.44-7.el7.i686", "product_id": "bluez-libs-0:5.44-7.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-libs@5.44-7.el7?arch=i686" } } }, { "category": "product_version", "name": "bluez-libs-devel-0:5.44-7.el7.i686", "product": { "name": "bluez-libs-devel-0:5.44-7.el7.i686", "product_id": "bluez-libs-devel-0:5.44-7.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/bluez-libs-devel@5.44-7.el7?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "product": { "name": "bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "product_id": "bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez@5.44-7.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "product": { "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "product_id": "bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-libs@5.44-7.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "product": { "name": "bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "product_id": "bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-cups@5.44-7.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "product": { "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "product_id": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-libs-devel@5.44-7.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "product": { "name": "bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "product_id": "bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-hid2hci@5.44-7.el7.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "product": { "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "product_id": "bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-libs@5.44-7.el7.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "product": { "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "product_id": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bluez-libs-devel@5.44-7.el7.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bluez-0:5.44-7.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-0:5.44-7.el7.tuxcare.els1.x86_64" }, "product_reference": "bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-0:5.44-7.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-0:5.44-7.el7.x86_64" }, "product_reference": "bluez-0:5.44-7.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64" }, "product_reference": "bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-0:5.44-7.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-0:5.44-7.el7.x86_64" }, "product_reference": "bluez-libs-0:5.44-7.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-0:5.44-7.el7.tuxcare.els1.i686 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.i686" }, "product_reference": "bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-0:5.44-7.el7.i686 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-0:5.44-7.el7.i686" }, "product_reference": "bluez-libs-0:5.44-7.el7.i686", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64" }, "product_reference": "bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-cups-0:5.44-7.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-cups-0:5.44-7.el7.x86_64" }, "product_reference": "bluez-cups-0:5.44-7.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64" }, "product_reference": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-devel-0:5.44-7.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-devel-0:5.44-7.el7.x86_64" }, "product_reference": "bluez-libs-devel-0:5.44-7.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686" }, "product_reference": "bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-libs-devel-0:5.44-7.el7.i686 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-libs-devel-0:5.44-7.el7.i686" }, "product_reference": "bluez-libs-devel-0:5.44-7.el7.i686", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64" }, "product_reference": "bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "bluez-hid2hci-0:5.44-7.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:bluez-hid2hci-0:5.44-7.el7.x86_64" }, "product_reference": "bluez-hid2hci-0:5.44-7.el7.x86_64", "relates_to_product_reference": "CentOS-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-3637", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "CentOS-7:bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-0:5.44-7.el7.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-3637" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f", "url": "https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f" }, { "category": "external", "summary": "https://vuldb.com/?id.211936", "url": "https://vuldb.com/?id.211936" } ], "release_date": "2022-10-21T11:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-06-12T13:07:08.850617Z", "details": "This issue is confined to BlueZ’s btmon J-Link backend (monitor/jlink.c), a developer-only tracing utility that is only active when btmon is explicitly run with the --jlink option and is not used by bluetoothd or other persistent services. Exploitation requires local access plus an attached Segger J‑Link RTT setup and only results in the btmon process crashing (availability-only) with no confidentiality or integrity impact. In centrally managed server/VM environments where Bluetooth monitoring sessions and J‑Link hardware are not part of production operation, the practical exposure is negligible, so this can be safely deprioritized.", "product_ids": [ "CentOS-7:bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-0:5.44-7.el7.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-7:bluez-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-0:5.44-7.el7.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-cups-0:5.44-7.el7.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-hid2hci-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-0:5.44-7.el7.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.i686", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.tuxcare.els1.x86_64", "CentOS-7:bluez-libs-devel-0:5.44-7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }