A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Oct 17, 2022 |
| Amazon_linux_2023 | — | Upgrade bluez-libs-develUpgrade bluez-hid2hciUpgrade bluez-cups-debuginfoUpgrade bluez-libs-devel-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-cupsUpgrade bluez-debuginfoUpgrade bluezUpgrade bluez-mesh-debuginfoUpgrade bluez-deprecated-debuginfoUpgrade bluez-debugsourceUpgrade bluez-libsUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-meshUpgrade bluez-deprecatedUpgrade bluez-obexd | Feb 17, 2025 | Jun 23, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Oct 17, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2022 |
| Suse | — | Upgrade bluezUpgrade bluez-devel-32bitUpgrade libbluetooth3-32bitUpgrade libbluetooth3Upgrade bluez-testUpgrade bluez-auto-enable-devicesUpgrade bluez-cupsUpgrade bluez-deprecatedUpgrade bluez-devel | Jan 27, 2023 | Oct 17, 2022 |
| Ubuntu | — | Upgrade libbluetooth3 (Ubuntu Pro)Upgrade bluez (Ubuntu Pro)Upgrade libbluetooth3Upgrade bluezUpgrade bluez-tests | Jun 7, 2024 | Oct 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub