A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Oct 17, 2022 |
| Amazon_linux_2023 | — | Upgrade bluez-deprecatedUpgrade bluez-obexdUpgrade bluez-meshUpgrade bluez-hid2hci-debuginfoUpgrade bluez-debugsourceUpgrade bluez-libs-develUpgrade bluez-hid2hciUpgrade bluez-obexd-debuginfoUpgrade bluezUpgrade bluez-mesh-debuginfoUpgrade bluez-libs-devel-debuginfoUpgrade bluez-deprecated-debuginfoUpgrade bluez-debuginfoUpgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-libs-debuginfo | Feb 17, 2025 | Jun 23, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Oct 17, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2022 |
| Suse | — | Upgrade bluez-develUpgrade bluez-auto-enable-devicesUpgrade bluez-cupsUpgrade bluez-testUpgrade bluez-deprecatedUpgrade libbluetooth3Upgrade bluez-devel-32bitUpgrade libbluetooth3-32bitUpgrade bluez | Jan 27, 2023 | Oct 17, 2022 |
| Ubuntu | — | Upgrade libbluetooth3 (Ubuntu Pro)Upgrade bluezUpgrade bluez (Ubuntu Pro)Upgrade libbluetooth3Upgrade bluez-tests | Jun 7, 2024 | Oct 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub