CVE-2020-25661

EUVD-2020-18323

05.11.2020, 21:15

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Type Confusion

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat	CNA	7.5 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 81%

Affected Products (NVD)

Vendor	Product	Version
redhat	enterprise_linux	8.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	not-affected
xenial	not-affected

linux-aws

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	not-affected
xenial	not-affected

linux-aws-5.0

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-hwe

bionic	dne
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

linux-azure

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	not-affected
xenial	not-affected

linux-azure-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-edge

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	dne
xenial	not-affected

linux-gcp-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-edge

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-5.0

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-hwe

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

linux-hwe-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-hwe-edge

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

linux-kvm

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	dne
xenial	not-affected

linux-lts-trusty

bionic	dne
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-lts-xenial

bionic	dne
focal	dne
groovy	dne
trusty	not-affected
xenial	dne

linux-oem

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

linux-oem-5.6

bionic	dne
focal	not-affected
groovy	dne
trusty	dne
xenial	dne

linux-oem-osp1

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle

bionic	not-affected
focal	not-affected
groovy	not-affected
trusty	dne
xenial	not-affected

linux-oracle-5.0

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-raspi

bionic	dne
focal	not-affected
groovy	not-affected
trusty	dne
xenial	dne

linux-raspi-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-raspi2

bionic	not-affected
focal	ignored
groovy	dne
trusty	dne
xenial	not-affected

linux-raspi2-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-riscv

bionic	dne
focal	not-affected
groovy	not-affected
trusty	dne
xenial	dne

linux-snapdragon

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

Common Weakness Enumeration

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

References

https://access.redhat.com/security/cve/CVE-2020-12351

https://access.redhat.com/security/vulnerabilities/BleedingTooth

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25661

https://access.redhat.com/security/cve/CVE-2020-12351

https://access.redhat.com/security/vulnerabilities/BleedingTooth

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25661