CVE-2011-2492: Infoleak
Last updated 24 July 2024
Other sources
Structures "l2capconninfo" and "rfcommconninfo" have one padding byte each. This byte in "cinfo" is copied to userspace uninitialized.
Acknowledgements:
Red Hat would like to thank Marek Kroemeke and Filip Palian for reporting this issue.
— Red Hat
The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2capsockgetsockoptold function in net/bluetooth/l2capsock.c and (2) the rfcommsockgetsockoptold function in net/bluetooth/rfcomm/sock.c.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2492?
CVE-2011-2492 has been rated as moderate severity due to the potential for information disclosure from uninitialized memory.
How do I fix CVE-2011-2492?
To fix CVE-2011-2492, update the Linux kernel to the latest patched version that addresses this vulnerability.
What types of systems are affected by CVE-2011-2492?
CVE-2011-2492 affects various versions of the Linux kernel including versions up to 3.0.
Is CVE-2011-2492 present in Red Hat Enterprise Linux?
Yes, CVE-2011-2492 is present in specific versions of Red Hat Enterprise Linux, particularly 5.0 and 5.6.
What components are affected by CVE-2011-2492?
CVE-2011-2492 affects the Bluetooth subsystem in the Linux kernel relating to the "l2cap_conninfo" and "rfcomm_conninfo" structures.