Skip to content
OpenAdvisories
High USN-4351-1 1 CVE

linux-firmware vulnerability

Published May 6, 2020 · Updated Sep 7, 2026

Ecosystem: Ubuntu

Summary

Eli Biham and Lior Neumann discovered that certain Bluetooth devices
incorrectly validated key exchange parameters. An attacker could possibly
use this issue to obtain sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS linux-firmware 1.157.23
Ubuntu · 18.04 LTS 18.04:LTS linux-firmware 1.173.18

Vulnerabilities 1

  • High 8.0
    CVE-2018-5383

    Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange

    Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public …

    Apple Android Open Source Project macOS iOS Android macOS iOS Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-5383