The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 10, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2016 | May 14, 2015 |
| Redhat_linux | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-debugUpgrade python-perfNo solution existsUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdump-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-rtUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-docUpgrade perfUpgrade kernel-kdumpUpgrade kernel-debuginfo-common-s390xUpgrade python-perf-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-traceUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelists | Nov 4, 2016 | Oct 10, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2 | Oct 25, 2016 | Oct 10, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub