The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 10, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2016 | May 14, 2015 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade kernel-toolsUpgrade kernel-bootwrapperUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-rt-docUpgrade kernel-rt-trace-develUpgrade kernel-tools-libs-develUpgrade kernel-kdumpUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-rt-traceUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-docUpgrade kernel-kdump-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade python-perfNo solution existsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug | Nov 4, 2016 | Oct 10, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-default | Oct 25, 2016 | Oct 10, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Oct 10, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub