The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-PAE-devel | Dec 1, 2016 | Jul 28, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 28, 2011 |
| Suse | — | Upgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-vmiUpgrade kernel-debugUpgrade kernel-kdump | Feb 17, 2015 | Jul 28, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-ia64 | Nov 8, 2024 | Jul 28, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 28, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub