CVE-2020-25661

05.11.2020, 21:15

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Type Confusion

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat	CNA	7.5 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 83%

Vendor	Product	Version
redhat	enterprise_linux	8.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	not-affected

linux-aws

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	not-affected

linux-aws-5.0

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-hwe

groovy	dne
focal	dne
bionic	dne
xenial	not-affected
trusty	dne

linux-azure

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	not-affected

linux-azure-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-edge

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-gcp-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-edge

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.0

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-hwe

groovy	dne
focal	dne
bionic	ignored
xenial	not-affected
trusty	dne

linux-hwe-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-hwe-edge

groovy	dne
focal	dne
bionic	not-affected
xenial	not-affected
trusty	dne

linux-kvm

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-lts-trusty

groovy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

groovy	dne
focal	dne
bionic	dne
xenial	dne
trusty	not-affected

linux-oem

groovy	dne
focal	dne
bionic	not-affected
xenial	not-affected
trusty	dne

linux-oem-5.6

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle

groovy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-oracle-5.0

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi

groovy	not-affected
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi2

groovy	dne
focal	ignored
bionic	not-affected
xenial	not-affected
trusty	dne

linux-raspi2-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-riscv

groovy	not-affected
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

groovy	dne
focal	dne
bionic	not-affected
xenial	not-affected
trusty	dne

Common Weakness Enumeration

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

References

https://access.redhat.com/security/cve/CVE-2020-12351

https://access.redhat.com/security/vulnerabilities/BleedingTooth

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25661

https://access.redhat.com/security/cve/CVE-2020-12351

https://access.redhat.com/security/vulnerabilities/BleedingTooth

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25661