The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 10, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2016 | May 14, 2015 |
| Redhat_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-trace-develUpgrade kernel-kdumpUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-rt-docUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-traceUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-develUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoNo solution existsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debugUpgrade python-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-debuginfo-common-x86_64 | Nov 4, 2016 | Oct 10, 2016 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-devel | Oct 25, 2016 | Oct 10, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub