Refactor Malicious Advertising Data Check in Bluetooth
Summary
GSD-2022-1000078: Bluetooth: refactor malicious adv data check. Affects Kernel versions < 7889b38a7f21ed19314f83194622b195d328465c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the operating system that manages system resources and provides an interface for software to interact with the hardware. Bluetooth is a wireless communication technology commonly used for short-range data exchange between devices. The vulnerability relates to the handling of malicious advertising data in Bluetooth.
Vulnerability Detail
The vulnerability in the Bluetooth component of the Kernel package allows for potential security risks. The specific impact and plausibility of an attack have not been proven yet. The vulnerability has been addressed in the Linux Kernel version v4.9.300 through commit 7889b38a7f21ed19314f83194622b195d328465c. For more details, refer to the provided references link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the Bluetooth component of the Kernel package has been addressed in the Linux Kernel version v4.9.300. It is recommended to update to the fixed version to mitigate any potential security risks. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The actual impact of this vulnerability is yet to be determined. It is important to update to the fixed version as a precautionary measure.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file like package-lock.json to the playground and it will provide real-time alerts for open-source vulnerabilities.
No known exploit has been reported for this vulnerability at the moment.
The vulnerability specifically affects the Kernel package in the Linux ecosystem. No other packages or dependencies are mentioned to be affected.
For more information about the fix, you can refer to the provided references link in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
