The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-docUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-firmware | Dec 1, 2016 | Feb 28, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 28, 2013 |
| Suse | — | Upgrade kernel-ec2-develUpgrade ext4dev-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-sourceUpgrade kernel-pae-baseUpgrade ocfs2-kmp-traceUpgrade kernel-traceUpgrade kernel-default-extraUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-ec2-baseUpgrade xen-kmp-traceUpgrade hyper-v-kmp-paeUpgrade gfs2-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade kernel-pae-extraUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade ext4dev-kmp-paeUpgrade hyper-v-kmp-traceUpgrade kernel-default-manUpgrade hyper-v-kmp-defaultUpgrade gfs2-kmp-paeUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-develUpgrade btrfs-kmp-defaultUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade ocfs2-kmp-ppc64Upgrade btrfs-kmp-xenUpgrade ocfs2-kmp-xenUpgrade kernel-trace-extraUpgrade cluster-network-kmp-ppc64Upgrade kernel-trace-develUpgrade cluster-network-kmp-xenUpgrade kernel-xen-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-paeUpgrade gfs2-kmp-xenUpgrade kernel-ec2Upgrade kernel-ppc64-baseUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade sle-hae-releaseUpgrade xen-kmp-default | Feb 17, 2015 | Feb 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.5.0-26-genericUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.0.0-32-genericUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-sparc64 | Nov 8, 2024 | Feb 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub