PT-2019-4157 · Linux+5 · Linux Kernel+5
Dhananjay Arunesh
·
Publicado
2018-08-21
·
Atualizado
2025-09-29
·
CVE-2019-10207
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.18.0
Linux kernel versions 5.x.x
Description
The issue is related to a flaw in the Linux kernel's Bluetooth implementation for UART, which can be exploited to cause a system crash. An attacker with local access and write permissions to the Bluetooth hardware could issue a specially crafted
ioctl function call to exploit this issue. The flaw is associated with a null pointer dereference in various Bluetooth driver files.Recommendations
For Linux kernel versions prior to 4.18.0, update to version 4.18.0 or later to resolve the issue.
For Linux kernel versions 5.x.x, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Bluetooth hardware to minimize the risk of exploitation.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu