The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 5, 2019 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-ppc64Upgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-paeUpgrade kernel-paeUpgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade ext4dev-kmp-paeUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade kernel-ec2Upgrade hyper-v-kmp-paeUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade kernel-pae-extra | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-32-preempt | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub