Bluetooth Vulnerability in Kernel: Use hdev lock for accept_list and reject_list in conn req
Summary
GSD-2022-1003388: Bluetooth: use hdev lock for accept_list and reject_list in conn req. Affects Kernel versions >= a55bd29d522729e0cb125474396acdc2a107d4d9, < ce237c1e252d0dac506c93c9818f8085185355be. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The Bluetooth subsystem within the Kernel allows for wireless communication between devices. It facilitates the establishment of connections and the exchange of data. However, a vulnerability has been identified in the Kernel's Bluetooth implementation, specifically in the handling of connection requests. This vulnerability could potentially be exploited by attackers to gain unauthorized access or execute malicious actions on affected systems.
Vulnerability Detail
The vulnerability arises from a lack of proper synchronization in the handling of the accept_list and reject_list parameters during connection requests in the Bluetooth subsystem of the Kernel. Without the appropriate hdev lock, concurrent access to these lists can lead to race conditions and inconsistent behavior. An attacker could potentially manipulate these lists to bypass intended restrictions or cause denial-of-service conditions. The impact of this vulnerability is dependent on the specific usage scenario and the actions an attacker can perform with the gained access.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable Bluetooth functionality on affected systems until the Kernel update is applied. This can be achieved by executing the following command in a terminal:
$
sudo systemctl disable bluetooth
This command disables the Bluetooth service, preventing any potential exploitation of the vulnerability. However, it also disables legitimate Bluetooth usage until the fix is implemented.
Conclusion
In conclusion, a vulnerability has been identified in the Bluetooth implementation of the Linux Kernel, which could potentially allow unauthorized access or malicious actions on affected systems. It is crucial to update the Kernel to version v5.15.46 or later to mitigate this vulnerability. Alternatively, users can temporarily disable Bluetooth functionality until the fix is applied. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the specific usage scenario and the actions an attacker can perform with the gained access. It could potentially lead to unauthorized access, data manipulation, or denial-of-service conditions.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this Bluetooth vulnerability in the Kernel.
Yes, a fix for this vulnerability is available in Linux Kernel version v5.15.46. It is recommended to update the Kernel to this version or a later one to ensure the vulnerability is addressed.
Yes, a temporary workaround is to disable Bluetooth functionality on affected systems. This can be done by executing the command 'sudo systemctl disable bluetooth' in a terminal. However, this workaround also disables legitimate Bluetooth usage until the fix is applied.
You can find more information about this vulnerability, including its technical details and the fix, in the vulnerability report at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003388.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
