Skip to content
OpenAdvisories
Unscored CVE-2011-2492 EUVD-2011-2479GHSA-hp8m-j8qg-prr2

The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users t…

Published Jul 28, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 linux-2.6 2.6.32-35squeeze1 DSA-2303-1
Debian 5.0 linux-2.6 2.6.26-26lenny4 DSA-2310-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 perf +14 2.6.32-131.12.1.el6 RHSA-2011:1189
RHEL 5 kernel +11 2.6.18-238.19.1.el5 RHSA-2011:0927
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat MRG 2 kernel-rt +10 2.6.33.9-rt31.75.el6rt RHSA-2011:1253

Advisories 5

References