bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Mar 2, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bluez-help | Feb 28, 2022 | Feb 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2022 |
| Suse | — | Upgrade bluez-devel-32bitUpgrade bluezUpgrade bluez-deprecatedUpgrade bluez-cupsUpgrade bluez-testUpgrade libbluetooth3Upgrade libbluetooth3-32bitUpgrade bluez-develUpgrade bluez-auto-enable-devices | Oct 26, 2022 | Mar 2, 2022 |
| Ubuntu | — | Upgrade bluezUpgrade libbluetooth3 | Nov 24, 2021 | Nov 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub