A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Nov 5, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Aug 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Nov 19, 2019 | Jul 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel | Nov 19, 2019 | Jul 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2020 | Jul 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Nov 5, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-ec2-extraUpgrade kernel-ec2-devel | Aug 17, 2019 | Aug 16, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-165-genericUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-31-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-1018-awsUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04 | Sep 3, 2019 | Aug 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub