Lucene search

K
ubuntuUbuntuUSN-4591-1
HistoryOct 19, 2020 - 12:00 a.m.

Linux kernel vulnerabilities

2020-10-1900:00:00
ubuntu.com
55

8.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • linux - Linux kernel
  • linux-hwe - Linux hardware enablement (HWE) kernel
  • linux-hwe-5.4 - Linux hardware enablement (HWE) kernel
  • linux-oem - Linux kernel for OEM systems
  • linux-raspi - Linux kernel for Raspberry Pi (V8) systems
  • linux-raspi-5.4 - Linux kernel for Raspberry Pi (V8) systems
  • linux-snapdragon - Linux kernel for Qualcomm Snapdragon processors

Details

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux
kernel contained a type-confusion error. A physically proximate remote
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux
kernel did not properly initialize memory in some situations. A physically
proximate remote attacker could use this to expose sensitive information
(kernel memory). (CVE-2020-12352)