Bluetooth btmtksdio Kernel Oops Vulnerability
Summary
GSD-2022-1001830: Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt. Affects Kernel versions >= 9aebfd4a2200ab8075e44379c758bccefdc589bb, < 770a97d3f34b801de1b04737b43e02c55118c41a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth btmtksdio vulnerability affects the Linux Kernel package. The Linux Kernel is the core component of the Linux operating system and provides essential functionality for the system's operation. It manages hardware resources, provides device drivers, and facilitates communication between software and hardware components. The btmtksdio driver is responsible for handling Bluetooth communication over the MediaTek SDIO interface. This vulnerability specifically impacts the btmtksdio_interrupt function in the btmtksdio driver.
Vulnerability Detail
The btmtksdio_interrupt function in the btmtksdio driver of the Linux Kernel is susceptible to a kernel oops. This vulnerability was introduced in version v5.2 of the Linux Kernel and fixed in version v5.15.33. An attacker could exploit this vulnerability to cause a kernel oops, leading to a denial of service condition. The exact impact and attack plausibility have not been proven yet. It is important to note that this vulnerability requires an attacker to have local access to the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official fix by updating the Linux Kernel to the latest version.
Conclusion
The Bluetooth btmtksdio vulnerability in the Linux Kernel can lead to a denial of service condition. It is crucial to update the Linux Kernel to version v5.15.33 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial of service condition by causing a kernel oops. However, the exact impact and attack plausibility have not been proven yet.
Users of Linux systems running the affected versions of the Linux Kernel are potentially affected by this vulnerability. It requires an attacker to have local access to the system.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the fix promptly to mitigate any potential risks.
The recommended mitigation is to update the Linux Kernel to version v5.15.33 or later, which includes the necessary fix for this vulnerability.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository. It is important to follow the appropriate procedures for updating the Linux Kernel to ensure a smooth transition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.