Bluetooth btmtksdio Kernel Oops Vulnerability
Summary
GSD-2022-1001198: Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt. Affects Kernel versions >= 9aebfd4a2200ab8075e44379c758bccefdc589bb, < 6d7be5afbb41c918d2f12f857f8c7efa50500be2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth btmtksdio vulnerability affects the Linux Kernel, specifically the btmtksdio driver. This driver is responsible for managing Bluetooth functionality on devices that use MediaTek SDIO-based Bluetooth controllers. The vulnerability can lead to a kernel oops in the btmtksdio_interrupt function, potentially causing a denial-of-service (DoS) condition or enabling an attacker to execute arbitrary code on the affected system.
Vulnerability Detail
The vulnerability originates from a flaw in the btmtksdio_interrupt function of the btmtksdio driver. When certain conditions are met, such as receiving a specific Bluetooth packet, the function can trigger a kernel oops, resulting in a system crash or potential code execution. An attacker with the ability to send specially crafted Bluetooth packets to a vulnerable system could exploit this vulnerability to disrupt the device's operation or gain unauthorized access.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable Bluetooth functionality on their devices to mitigate the risk of exploitation. This can be done by turning off Bluetooth in the system settings or using command-line tools to disable the Bluetooth service. However, this workaround may impact the usability of Bluetooth-dependent features on the affected device.
Conclusion
The Bluetooth btmtksdio vulnerability in the Linux Kernel's btmtksdio driver can lead to a kernel oops, potentially resulting in a system crash or code execution. It is crucial to update the Kernel to version v5.17.2 or later to mitigate this vulnerability. Disabling Bluetooth functionality on affected devices can serve as a temporary workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a kernel oops, resulting in a system crash or potential code execution. An attacker could exploit this vulnerability to disrupt device operation or gain unauthorized access.
Systems running the Linux Kernel with the btmtksdio driver are affected. Specifically, devices that use MediaTek SDIO-based Bluetooth controllers may be vulnerable.
At the time of this report, there is no known public exploit for this vulnerability. However, it is important to apply the recommended fix to prevent potential exploitation.
Disabling Bluetooth functionality on the affected devices can serve as a temporary mitigation. However, it may impact the usability of Bluetooth-dependent features.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this Bluetooth btmtksdio vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
