Published: 25/11/2019 Updated: 12/02/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x prior to 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-8553 Jan Beulich discovered that CVE-2015-2150 was not completely addressed If a PCI physical function is passed through to a Xen guest, the guest is able to access its memory and I ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2018-20836 chenxiang reported a race condition in libsas, the kernel subsystem supporting Serial Attached SCSI (SAS) devices, which could lead to a use-after-free It is not clear how thi ...

Several security issues were fixed in the Linux kernel ...

USN 4115-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

oss-sec mailing list archives   By Date By Thread </form>    Re: CVE-2019-10207: linux kernel: bluetooth: hci_uart: 0x0 address execution as nonprivileged user  ...

oss-sec mailing list archives   By Date By Thread </form>    CVE-2019-10207: linux kernel: bluetooth: hci_uart: 0x0 address execution as nonprivileged user  <!- ...

PoC for CVE-2019-10207

CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hci_uart: kernel NULL pointer dereference gcc CVE-2019-10207c -o cve-2019-10207-poc -static test on 4200 kernel compile CONFIG_* must be opened: CONFIG_BT_HCIUART_MRVL=y CONFIG_BT_MRVL=y

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10207 https://security.netapp.com/advisory/ntap-20200103-0001/https://access.redhat.com/errata/RHSA-2019:3517 https://nvd.nist.gov https://github.com/butterflyhack/CVE-2019-10207 https://www.debian.org/security/2019/dsa-4497 https://usn.ubuntu.com/4118-1/

CVE-2019-10207

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect