The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade perfUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | Mar 15, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 14, 2013 |
| Suse | — | Upgrade btrfs-kmp-paeUpgrade kernel-traceUpgrade ext4dev-kmp-paeUpgrade kernel-sourceUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade xen-kmp-traceUpgrade hyper-v-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-defaultUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-defaultUpgrade xen-kmp-paeUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-paeUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-xen | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-3.2.0-32-genericUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-32-highbankUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.0.0-28-serverUpgrade linux-image-2.6.32-46-386Upgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.0.0-28-virtual | Nov 8, 2024 | Mar 15, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub