Bluetooth Vulnerability in Linux Kernel
Summary
GSD-2022-1003602: Bluetooth: use hdev lock for accept_list and reject_list in conn req. Affects Kernel versions >= a55bd29d522729e0cb125474396acdc2a107d4d9, < 8ace1e63550a4488f3eb4ce0fea7007898908f7d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware interaction, process management, and device drivers. Bluetooth is a wireless communication technology commonly used for short-range data exchange between devices. The Linux Kernel includes Bluetooth support to enable Bluetooth connectivity on Linux-based systems.
Vulnerability Detail
The vulnerability identified as GSD-2022-1003602 in the Linux Kernel's Bluetooth implementation allows an attacker to bypass connection request restrictions. Specifically, the vulnerability arises from the lack of proper locking mechanisms for the accept_list and reject_list in connection requests. This flaw can be exploited by an attacker to establish unauthorized Bluetooth connections, potentially leading to unauthorized access, data leakage, or other malicious activities. The vulnerability was introduced in version v3.17 of the Linux Kernel and has been fixed in version v5.10.121.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable Bluetooth functionality on their systems until the Linux Kernel is updated. This can be achieved by disabling the Bluetooth service or module depending on the Linux distribution in use. Below is an example of disabling the Bluetooth service on a system running systemd:
- Open a terminal.
- Run the following command to stop the Bluetooth service:
sudo systemctl stop bluetooth - Run the following command to disable the Bluetooth service from starting on boot:
sudo systemctl disable bluetooth
Conclusion
The Bluetooth vulnerability in the Linux Kernel's connection request handling poses a risk of unauthorized access and data leakage. It is crucial to update the Linux Kernel to version v5.10.121 or later to mitigate this vulnerability. Disabling Bluetooth functionality can serve as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability allows an attacker to bypass connection request restrictions in the Linux Kernel's Bluetooth implementation. This can lead to unauthorized Bluetooth connections, potentially resulting in unauthorized access, data leakage, or other malicious activities.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just a manifest file like package-lock.json.
Yes, a patch for this vulnerability is available in the Linux Kernel version v5.10.121. It is recommended to update the Linux Kernel to this version or later to fix the vulnerability.
Yes, disabling Bluetooth functionality on your system can serve as a temporary measure until the Linux Kernel is updated. You can disable the Bluetooth service or module depending on your Linux distribution.
You can find more information about this vulnerability in the GSD-2022-1003602 JSON report available on the Cloud Security Alliance's GSD Database (https://github.com/cloudsecurityalliance/gsd-database).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
