PT-2021-11776 · Linux+1 · Linux Kernel+1

Published

2021-02-19

·

Updated

2023-07-28

·

CVE-2020-35499

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11
Description: A NULL pointer dereference flaw may occur in the sco sock getsockopt function in net/bluetooth/sco.c due to the lack of a sanity check for a socket connection when using BT SNDMTU/BT RCVMTU for SCO sockets. This could allow a local attacker with special user privileges to crash the system or leak kernel internal information.
Recommendations: For Linux kernel versions prior to 5.11, consider disabling the sco sock getsockopt function as a temporary workaround until a patch is available. Restrict access to the net/bluetooth/sco.c module to minimize the risk of exploitation. Avoid using the BT SNDMTU/BT RCVMTU options for SCO sockets until the issue is resolved. Update to a version 5.11 or later to fully resolve the issue.

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2021-1447
ALT-PU-2021-1525
ALT-PU-2021-1869
ALT-PU-2021-1888
ALT-PU-2021-1896
ALT-PU-2022-1240
ALT-PU-2022-1419
ALT-PU-2022-1421
ALT-PU-2023-1814
AZL-6527
CVE-2020-35499

Affected Products

Alt Linux
Linux Kernel