REDHAT-BUG-576018: High severity red hat linux vulnerability
Description of problem: When creating a high number of Bluetooth sockets (L2CAP, SCO and RFCOMM) it is possible to scribble repeatedly on arbitrary pages of memory. Ensure that the content of these sysfs files is always less than one page. Even if this means truncating. The files in question are scheduled to be moved over to debugfs in the future anyway.
Upstream patch: http://git.kernel.org/linus/101545f6fef4a0a3ea8daf0b5b880df2c6a92a69
Acknowledgements:
Red Hat would like to thank Neil Brown for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-576018?
REDAHT-BUG-576018 is considered a medium severity vulnerability due to potential memory corruption issues.
How do I fix REDHAT-BUG-576018?
To fix REDHAT-BUG-576018, ensure that sysfs files related to Bluetooth sockets are limited to content less than one page.
What software is affected by REDHAT-BUG-576018?
REDAHT-BUG-576018 affects the Red Hat Linux Kernel implementations that handle Bluetooth sockets.
When was REDHAT-BUG-576018 reported?
REDAHT-BUG-576018 was reported in 2010, highlighting an issue in the handling of Bluetooth socket connections.
What type of vulnerability is REDHAT-BUG-576018?
REDAHT-BUG-576018 is a memory corruption vulnerability that can lead to unreliable system behavior.