First published: Tue Mar 23 2010(Updated: )
Description of problem: When creating a high number of Bluetooth sockets (L2CAP, SCO and RFCOMM) it is possible to scribble repeatedly on arbitrary pages of memory. Ensure that the content of these sysfs files is always less than one page. Even if this means truncating. The files in question are scheduled to be moved over to debugfs in the future anyway. Upstream patch: <a href="http://git.kernel.org/linus/101545f6fef4a0a3ea8daf0b5b880df2c6a92a69">http://git.kernel.org/linus/101545f6fef4a0a3ea8daf0b5b880df2c6a92a69</a> Acknowledgements: Red Hat would like to thank Neil Brown for reporting this issue.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Linux |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
REDAHT-BUG-576018 is considered a medium severity vulnerability due to potential memory corruption issues.
To fix REDHAT-BUG-576018, ensure that sysfs files related to Bluetooth sockets are limited to content less than one page.
REDAHT-BUG-576018 affects the Red Hat Linux Kernel implementations that handle Bluetooth sockets.
REDAHT-BUG-576018 was reported in 2010, highlighting an issue in the handling of Bluetooth socket connections.
REDAHT-BUG-576018 is a memory corruption vulnerability that can lead to unreliable system behavior.