REDHAT-BUG-2324332: XEE
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: bnep: fix wild-memory-access in protounregister
There's issue as follows: KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f] CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W RIP: 0010:protounregister+0xee/0x400 Call Trace: <TASK> dosysdeletemodule+0x318/0x580 dosyscall64+0xc1/0x1d0 entrySYSCALL64afterhwframe+0x77/0x7f
As bnepinit() ignore bnepsockinit()'s return value, and bnepsockinit() will cleanup all resource. Then when remove bnep module will call bnepsockcleanup() to cleanup sock's resource. To solve above issue just return bnepsockinit()'s return value in bnepexit().
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2324332?
The severity of REDHAT-BUG-2324332 is high due to the potential for wild memory access vulnerabilities.
How do I fix REDHAT-BUG-2324332?
To fix REDHAT-BUG-2324332, update to the latest version of the Linux kernel provided by your distribution.
What systems are affected by REDHAT-BUG-2324332?
The systems affected by REDHAT-BUG-2324332 include any running vulnerable versions of the Linux kernel with Bluetooth functionality.
What vulnerability does REDHAT-BUG-2324332 address?
REDHAT-BUG-2324332 addresses a vulnerability related to wild memory access in the Bluetooth BNEP protocol.
What should I do if I cannot update due to REDHAT-BUG-2324332?
If you cannot update due to REDHAT-BUG-2324332, consider implementing additional security measures such as disabling Bluetooth until a patch can be applied.