A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Oct 17, 2022 |
| Amazon_linux_2023 | — | Upgrade bluez-meshUpgrade bluez-hid2hci-debuginfoUpgrade bluez-obexdUpgrade bluez-deprecatedUpgrade bluez-debuginfoUpgrade bluez-libsUpgrade bluez-libs-debuginfoUpgrade bluez-mesh-debuginfoUpgrade bluezUpgrade bluez-obexd-debuginfoUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-libs-devel-debuginfoUpgrade bluez-hid2hciUpgrade bluez-libs-develUpgrade bluez-deprecated-debuginfoUpgrade bluez-debugsource | Feb 17, 2025 | Jun 23, 2022 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Oct 17, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2022 |
| Suse | — | Upgrade bluezUpgrade libbluetooth3Upgrade bluez-devel-32bitUpgrade libbluetooth3-32bitUpgrade bluez-develUpgrade bluez-deprecatedUpgrade bluez-testUpgrade bluez-auto-enable-devicesUpgrade bluez-cups | Jan 27, 2023 | Oct 17, 2022 |
| Ubuntu | — | Upgrade bluez (Ubuntu Pro)Upgrade bluezUpgrade libbluetooth3Upgrade bluez-testsUpgrade libbluetooth3 (Ubuntu Pro) | Jun 7, 2024 | Oct 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub