The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Apr 27, 2020 | May 10, 2019 |
| Amazon_linux | — | Upgrade kernel | May 31, 2019 | May 10, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | May 10, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perf | Aug 2, 2019 | May 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Sep 25, 2019 | May 10, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 5, 2019 | May 10, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 10, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2019 | May 10, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-extra | May 17, 2019 | May 10, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-4.15.0-1037-gcpUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1039-kvmUpgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1044-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1088-awsUpgrade linux-image-4.15.0-1058-snapdragonUpgrade linux-image-4.15.0-1041-raspi2Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-4.15.0-1018-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-55-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-55-lowlatencyUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-55-generic-lpaeUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-23-generic | Jul 24, 2019 | May 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub