The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 12, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2017 | Sep 12, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debugUpgrade kernel-oriUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Nov 30, 2017 | Sep 12, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 13, 2017 | Sep 12, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 12, 2017 | Sep 12, 2017 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Sep 14, 2017 | Sep 12, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-96-generic-lpaeUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1035-awsUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1031-gkeUpgrade linux-image-4.10.0-35-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-96-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-96-genericUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-paeUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-4.4.0-1007-kvmUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-4.10.0-1018-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.2.0-131-highbankUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-96-lowlatencyUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-omapUpgrade linux-image-lowlatencyUpgrade linux-image-3.2.0-131-virtualUpgrade linux-image-4.4.0-1074-raspi2Upgrade linux-image-4.4.0-1076-snapdragonUpgrade linux-image-4.4.0-96-powerpc-e500mcUpgrade linux-image-4.10.0-35-generic-lpaeUpgrade linux-image-4.4.0-96-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.2.0-131-powerpc-smpUpgrade linux-image-3.2.0-131-generic-paeUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.10.0-35-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-131-omapUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-96-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.2.0-131-powerpc64-smpUpgrade linux-image-3.2.0-131-genericUpgrade linux-image-highbank | Sep 19, 2017 | Sep 12, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub