Lucene search

K
osvGoogleOSV:USN-6741-1
HistoryApr 19, 2024 - 1:42 p.m.

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

2024-04-1913:42:12
Google
osv.dev
3
linux
bluetooth
authentication
security
jfs
bpf
netfilter
vulnerabilities

7.7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • JFS file system;
  • BPF subsystem;
  • Netfilter;
    (CVE-2023-52603, CVE-2023-52600, CVE-2024-26581, CVE-2024-26589)