Lucene search

K
cvelistRedhatCVELIST:CVE-2023-2002
HistoryMay 26, 2023 - 12:00 a.m.

CVE-2023-2002

2023-05-2600:00:00
CWE-250
redhat
www.cve.org
1
vulnerability
hci sockets
linux kernel
missing capability check
bluetooth
management commands
confidentiality
integrity
availability
cve-2023-2002

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Kernel prior to Kernel 6.4-rc1",
        "status": "affected"
      }
    ]
  }
]