CVE-2022-49474

CVE-2022-49474 is a high-severity use-after-free vulnerability in the Linux kernel's Bluetooth stack, specifically affecting the sco_sock_timeout function. A race condition during consecutive socket connections can lead to a dangling sco_conn object, causing a use-after-free when the associated socket is freed and the timer callback attempts to access it. With a CVSS score of 7.8, this local attack could result in high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.