PT-2019-4157 · Linux+5 · Linux Kernel+5
Dhananjay Arunesh
·
Published
2018-08-21
·
Updated
2025-09-29
·
CVE-2019-10207
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.18.0
Linux kernel versions 5.x.x
Description
The issue is related to a flaw in the Linux kernel's Bluetooth implementation for UART, which can be exploited to cause a system crash. An attacker with local access and write permissions to the Bluetooth hardware could issue a specially crafted
ioctl function call to exploit this issue. The flaw is associated with a null pointer dereference in various Bluetooth driver files.Recommendations
For Linux kernel versions prior to 4.18.0, update to version 4.18.0 or later to resolve the issue.
For Linux kernel versions 5.x.x, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Bluetooth hardware to minimize the risk of exploitation.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu