BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Nov 22, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-source-vanilla | Jan 16, 2025 | Nov 22, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1086-awsUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04 | Mar 19, 2025 | Nov 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Nov 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub