Red Hat Security Advisory: kernel security update

Fixed packages 25

Vulnerabilities 2

• Unscored —
  CVE-2020-12351 Public exploit

  Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 23, 2020
• Unscored —
  CVE-2020-12352 Public exploit

  Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adj…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 23, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/BleedingTooth
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1886521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1886529
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4288.json
• report
  https://access.redhat.com/security/cve/CVE-2020-12351
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12351
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12351
• article
  https://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq
• article
  https://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq
• article
  https://lore.kernel.org/linux-bluetooth/20200806181714.3216076-1-luiz.dentz@gmail.com/
• article
  https://lore.kernel.org/linux-bluetooth/20200806181714.3216076-2-luiz.dentz@gmail.com/
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html
• article
  https://www.zdnet.com/article/google-warns-of-severe-bleedingtooth-bluetooth-flaw-in-linux-kernel/
• report
  https://access.redhat.com/security/cve/CVE-2020-12352
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12352
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12352