CVE-2023-2002: Medium severity Linux Linux kernel vulnerability
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hcisock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
Other sources
An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI sockets as trusted. Trusted sockets are intended to enable the sending and receiving of management commands and events, such as pairing or connecting with a new device. As a result, unprivileged users can acquire a trusted socket, leading to unauthorized execution of management commands. The exploit requires only the presence of a set of commonly used setuid programs (e.g., su, sudo).
Reference: https://www.openwall.com/lists/oss-security/2023/04/16/3
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2002?
CVE-2023-2002 is considered a high severity vulnerability due to its potential to allow unauthorized command execution affecting Bluetooth communications.
How do I fix CVE-2023-2002?
To fix CVE-2023-2002, update the Linux kernel on your system to version 6.4 or later.
Which software is affected by CVE-2023-2002?
CVE-2023-2002 affects several Linux kernel versions prior to 6.4 and specific Debian Linux versions like 10.0 and 11.0.
What is the impact of exploiting CVE-2023-2002?
Exploiting CVE-2023-2002 could compromise the confidentiality, integrity, and availability of Bluetooth communications.
Are there any workarounds for CVE-2023-2002?
There are no known effective workarounds for CVE-2023-2002, so updating the kernel is the recommended action.