The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernelUpgrade python-perf | Dec 1, 2016 | Feb 28, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 28, 2013 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-xenUpgrade btrfs-kmp-defaultUpgrade gfs2-kmp-xenUpgrade kernel-ppc64Upgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade gfs2-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-trace-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-xenUpgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade kernel-xen-extraUpgrade kernel-ec2Upgrade cluster-network-kmp-ppc64Upgrade kernel-trace-extraUpgrade cluster-network-kmp-xenUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade gfs2-kmp-ppc64Upgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-traceUpgrade xen-kmp-traceUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade hyper-v-kmp-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-traceUpgrade hyper-v-kmp-paeUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-paeUpgrade hyper-v-kmp-traceUpgrade kernel-pae-extraUpgrade kernel-default-develUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-traceUpgrade cluster-network-kmp-trace | Feb 17, 2015 | Feb 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.0.0-32-virtualUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.0.0-32-genericUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.5.0-26-genericUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-2.6.32-46-preempt | Nov 8, 2024 | Feb 28, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub