Lucene search

K
osvGoogleOSV:USN-4591-1
HistoryOct 19, 2020 - 11:51 p.m.

linux, linux-hwe, linux-hwe-5.4, linux-oem, linux-raspi, linux-raspi-5.4, linux-snapdragon vulnerabilities

2020-10-1923:51:52
Google
osv.dev
9

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux
kernel contained a type-confusion error. A physically proximate remote
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux
kernel did not properly initialize memory in some situations. A physically
proximate remote attacker could use this to expose sensitive information
(kernel memory). (CVE-2020-12352)