BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Nov 22, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qa | Jan 16, 2025 | Nov 22, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1086-awsUpgrade linux-image-oem-20.04Upgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-5.15.0-1078-ibm | Mar 19, 2025 | Nov 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Nov 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub