vulnerability

Oracle Linux: CVE-2023-2002: ELSA-2023-3723: kernel security and bug fix update (IMPORTANT) (Multiple Advisories)

Severity
7
CVSS
(AV:A/AC:L/Au:S/C:P/I:P/A:C)
Published
2023-04-16
Added
2023-07-25
Modified
2025-01-07

Description

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.

Solution

oracle-linux-upgrade-kernel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.