The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 24, 2007 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-sn2Upgrade kernel-defaultUpgrade kernel-umUpgrade kernel-s390Upgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-s390xUpgrade kernel-pseries64Upgrade um-host-install-initrdUpgrade kernel-64k-pagesizeUpgrade kernel-bigsmpUpgrade um-host-kernelUpgrade kernel-pmac64Upgrade kernel-smp | Feb 17, 2015 | Apr 24, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-28-386 | Nov 8, 2024 | Apr 24, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub