The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 5, 2019 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-ec2Upgrade hyper-v-kmp-paeUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-pae-extraUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-pae-develUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade kernel-xen-extraUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-default-extraUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-ppc64-devel | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-powerpc64-smp | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub