CVE-2011-2492

Linux Kernel < 3.0 - Information Disclosure via Bluetooth getsockopt System Call

Title source: llm
STIX 2.1

Description

The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2011-0927.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=703019
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/24/3
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025778
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/24/2
Broken Link mailing-list x_refsource_mlist
http://permalink.gmane.org/gmane.linux.bluez.kernel/12909
Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=139447903326211&w=2

Scores

EPSS 0.0035
EPSS Percentile 27.5%

Details

CWE
CWE-200
Status published
Products (7)
linux/linux_kernel 3.0 (4 CPE variants)
linux/linux_kernel < 3.0
redhat/enterprise_linux_aus 5.6
redhat/enterprise_linux_desktop 5.0
redhat/enterprise_linux_eus 5.6
redhat/enterprise_linux_server 5.0
redhat/enterprise_linux_workstation 5.0
Published Jul 28, 2011
Tracked Since Feb 18, 2026