bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Mar 2, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bluez-help | Feb 28, 2022 | Feb 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2022 |
| Suse | — | Upgrade bluez-devel-32bitUpgrade bluez-deprecatedUpgrade bluez-testUpgrade bluezUpgrade bluez-cupsUpgrade bluez-develUpgrade libbluetooth3Upgrade bluez-auto-enable-devicesUpgrade libbluetooth3-32bit | Oct 26, 2022 | Mar 2, 2022 |
| Ubuntu | — | Upgrade libbluetooth3Upgrade bluez | Nov 24, 2021 | Nov 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub