Summary
Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux
kernel contained a type-confusion error. A physically proximate remote
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2020-12351)
Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux
kernel did not properly initialize memory in some situations. A physically
proximate remote attacker could use this to expose sensitive information
(kernel memory). (CVE-2020-12352)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-122.124~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-122.124 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-52.57~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1100.110 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi-5.4 | 5.4.0-1022.25~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1090.99 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-52.57 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1022.25 |
Vulnerabilities 2
-
Unscored —CVE-2020-12351 Public exploit
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via …
-
Unscored —CVE-2020-12352 Public exploit
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adj…