Описание
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
Add the same NULL guard already present in
l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
A flaw was found in the Linux kernel's Bluetooth L2CAP (Logical Link Control and Adaptation Protocol) implementation. A missing null pointer guard in the l2cap_sock_state_change_cb() function can lead to a null pointer dereference. This vulnerability could allow an attacker to cause a system crash, resulting in a Denial of Service (DoS).
Отчет
This Moderate impact flaw in the Linux kernel's Bluetooth L2CAP implementation can lead to a system crash due to a null pointer dereference. Exploitation requires local access or close proximity to a system with an active Bluetooth adapter, limiting the attack surface. Red Hat Enterprise Linux systems with Bluetooth enabled are affected.
Меры по смягчению последствий
To mitigate this issue, disable the Bluetooth functionality if it is not required. This can be achieved by blacklisting the bluetooth kernel module.
- Create a new file
/etc/modprobe.d/disable-bluetooth.confwith the following content:blacklist bluetooth - Regenerate the initramfs:
sudo dracut -f -v - Reboot the system for the changes to take effect:
sudo rebootWarning: Disabling the Bluetooth module will prevent all Bluetooth-related functionality on the system and requires a system reboot to take full effect.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
In the Linux kernel, the following vulnerability has been resolved: B ...
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
EPSS
5.5 Medium
CVSS3