The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 10, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2016 | May 14, 2015 |
| Redhat_linux | — | Upgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-kdump-develUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debugNo solution existsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-bootwrapperUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-kdumpUpgrade kernel-debuginfo-common-s390xUpgrade kernel-abi-whitelistsUpgrade kernel-rt-trace-develUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-rt-traceUpgrade kernel-rt-docUpgrade kernel-tools-libs-develUpgrade perfUpgrade perf-debuginfo | Nov 4, 2016 | Oct 10, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-default | Oct 25, 2016 | Oct 10, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub