The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-debug-devel | Dec 1, 2016 | Jul 28, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 28, 2011 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade kernel-vmipaeUpgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-vmiUpgrade kernel-debug | Feb 17, 2015 | Jul 28, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-itanium | Nov 8, 2024 | Jul 28, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 28, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub