The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 10, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2016 | May 14, 2015 |
| Redhat_linux | — | Upgrade kernel-kdumpUpgrade kernel-rt-traceUpgrade kernel-rtUpgrade kernel-bootwrapperUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-docUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-abi-whitelistsUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoNo solution existsUpgrade kernel-debuginfo-common-ppc64Upgrade python-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-kdump-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64 | Nov 4, 2016 | Oct 10, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extra | Oct 25, 2016 | Oct 10, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub