The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 10, 2018 | Dec 5, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfo | Jan 30, 2018 | Dec 5, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade perf | Jan 19, 2018 | Dec 5, 2017 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade kernel-uek-firmwareUpgrade kernel-uek-develUpgrade kernel-uekUpgrade dtrace-modulesUpgrade kernel-uek-debug-develUpgrade kernel-uek-doc | May 2, 2018 | Dec 5, 2017 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-extra | Jan 4, 2018 | Dec 5, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency | Feb 24, 2018 | Dec 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub