Google and Intel warn of Linux Kernel flaw
 

Bluetooth causing problems

Google and Intel are warning of a high-severity Bluetooth flaw in all but the most recent version of the Linux Kernel.

Google said the bug allows seamless code execution by attackers within the Bluetooth range, and Intel is characterising the flaw as providing an escalation of privileges or the disclosure of information.

The flaw resides in BlueZ, the software stack that by default implements all Bluetooth core protocols and layers for Linux. Besides Linux laptops, it is used in many consumer or industrial Internet-of-things devices. It works with Linux versions 2.4.6 and later.

Dubbed BleedingTooth, by Google engineer Andy Nguyen the bug provides a reliable way for nearby attackers to execute malicious code of their choice on vulnerable Linux devices that use BlueZ for Bluetooth.

Intel, meanwhile, has issued a bare-bones advisory that categorises the flaw as privilege escalation or information disclosure vulnerability.
https://fudzilla.com/news/mobile/517...ux-kernel-flaw