A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Oct 17, 2022 |
| Amazon_linux_2023 | — | Upgrade bluez-deprecatedUpgrade bluez-meshUpgrade bluez-hid2hci-debuginfoUpgrade bluez-obexdUpgrade bluez-hid2hciUpgrade bluez-obexd-debuginfoUpgrade bluez-libs-devel-debuginfoUpgrade bluez-libs-debuginfoUpgrade bluez-libsUpgrade bluez-debugsourceUpgrade bluez-debuginfoUpgrade bluez-libs-develUpgrade bluez-deprecated-debuginfoUpgrade bluez-cupsUpgrade bluez-mesh-debuginfoUpgrade bluezUpgrade bluez-cups-debuginfo | Feb 17, 2025 | Jun 23, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Oct 17, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2022 |
| Suse | — | Upgrade bluez-cupsUpgrade bluez-auto-enable-devicesUpgrade bluez-develUpgrade bluez-deprecatedUpgrade bluez-testUpgrade bluezUpgrade bluez-devel-32bitUpgrade libbluetooth3Upgrade libbluetooth3-32bit | Jan 27, 2023 | Oct 17, 2022 |
| Ubuntu | — | Upgrade bluezUpgrade libbluetooth3Upgrade bluez (Ubuntu Pro)Upgrade bluez-testsUpgrade libbluetooth3 (Ubuntu Pro) | Jun 7, 2024 | Oct 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub