Description
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
Exploits (1)
References (5)
Scores
CVSS v3
6.8
EPSS
0.0060
EPSS Percentile
69.4%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Details
CWE
CWE-250
CWE-863
Status
published
Products (3)
debian/debian_linux
10.0
debian/debian_linux
11.0
linux/linux_kernel
< 6.4
Published
May 26, 2023
Tracked Since
Feb 18, 2026