BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Nov 22, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-devel-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-debug-vdso | Jan 16, 2025 | Nov 22, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1086-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-azureUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-virtual-hwe-20.04 | Mar 19, 2025 | Nov 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Nov 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub