Google and Intel warn of Linux Kernel flaw

Stefan Mileschin · 16th October 2020, 10:13

Bluetooth causing problems

Google and Intel are warning of a high-severity Bluetooth flaw in all but the most recent version of the Linux Kernel.

Google said the bug allows seamless code execution by attackers within the Bluetooth range, and Intel is characterising the flaw as providing an escalation of privileges or the disclosure of information.

The flaw resides in BlueZ, the software stack that by default implements all Bluetooth core protocols and layers for Linux. Besides Linux laptops, it is used in many consumer or industrial Internet-of-things devices. It works with Linux versions 2.4.6 and later.

Dubbed BleedingTooth, by Google engineer Andy Nguyen the bug provides a reliable way for nearby attackers to execute malicious code of their choice on vulnerable Linux devices that use BlueZ for Bluetooth.

Intel, meanwhile, has issued a bare-bones advisory that categorises the flaw as privilege escalation or information disclosure vulnerability.
https://fudzilla.com/news/mobile/517...ux-kernel-flaw

16th October 2020, 10:13	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,462	Google and Intel warn of Linux Kernel flaw Bluetooth causing problems Google and Intel are warning of a high-severity Bluetooth flaw in all but the most recent version of the Linux Kernel. Google said the bug allows seamless code execution by attackers within the Bluetooth range, and Intel is characterising the flaw as providing an escalation of privileges or the disclosure of information. The flaw resides in BlueZ, the software stack that by default implements all Bluetooth core protocols and layers for Linux. Besides Linux laptops, it is used in many consumer or industrial Internet-of-things devices. It works with Linux versions 2.4.6 and later. Dubbed BleedingTooth, by Google engineer Andy Nguyen the bug provides a reliable way for nearby attackers to execute malicious code of their choice on vulnerable Linux devices that use BlueZ for Bluetooth. Intel, meanwhile, has issued a bare-bones advisory that categorises the flaw as privilege escalation or information disclosure vulnerability. https://fudzilla.com/news/mobile/517...ux-kernel-flaw

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Windows 10's built-in Linux kernel will be available to everyone soon	Stefan Mileschin	WebNews	0	16th March 2020 05:46
Windows 10’s Linux Kernel Is Now Available	Stefan Mileschin	WebNews	0	13th June 2019 09:28
AMD's Ryzen Will Really Like a Newer Linux Kernel	Stefan Mileschin	WebNews	0	2nd March 2017 05:35
Google denies Linux flaw is a serious Android security issue	Stefan Mileschin	WebNews	0	23rd January 2016 14:00
New version of Linux kernel appears	Stefan Mileschin	WebNews	0	2nd July 2013 06:31
Google working on experimental 3.8 Linux kernel for Android	Stefan Mileschin	WebNews	0	1st March 2013 07:17
Newly discovered Windows kernel flaw bypasses UAC	jmke	WebNews	0	30th November 2010 17:33
Five Years Of Linux Kernel Benchmarks: 2.6.12 Through 2.6.37	jmke	WebNews	1	4th November 2010 16:35
Linux 2.6.26 Kernel Benchmarks	jmke	WebNews	0	18th July 2008 09:01
ATI Driver Flaw Exposes Vista Kernel to Attackers	jmke	WebNews	0	10th August 2007 15:30