The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 12, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2017 | Sep 12, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-oriUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel | Nov 30, 2017 | Sep 12, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 13, 2017 | Sep 12, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 12, 2017 | Sep 12, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extra | Sep 14, 2017 | Sep 12, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-paeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-4.4.0-96-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1035-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-4.4.0-1031-gkeUpgrade linux-image-4.4.0-1007-kvmUpgrade linux-image-4.4.0-96-genericUpgrade linux-image-kvmUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-4.10.0-1018-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-omapUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-4.4.0-96-powerpc64-smpUpgrade linux-image-3.2.0-131-highbankUpgrade linux-image-4.4.0-96-lowlatencyUpgrade linux-image-4.10.0-35-genericUpgrade linux-image-4.4.0-96-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-96-powerpc64-embUpgrade linux-image-3.2.0-131-genericUpgrade linux-image-4.4.0-1076-snapdragonUpgrade linux-image-3.2.0-131-powerpc64-smpUpgrade linux-image-3.2.0-131-omapUpgrade linux-image-genericUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-3.2.0-131-generic-paeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.2.0-131-virtualUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-highbankUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-35-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.10.0-35-lowlatencyUpgrade linux-image-4.4.0-96-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.2.0-131-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1074-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-emb-lts-xenial | Sep 19, 2017 | Sep 12, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub