Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 661954 - INTEL-SA-00128: Bluetooth pairing vulnerability
Summary: INTEL-SA-00128: Bluetooth pairing vulnerability
Status: IN_PROGRESS
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-07-24 13:09 UTC by Till Schäfer
Modified: 2022-10-15 02:50 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Till Schäfer 2018-07-24 13:09:50 UTC
Intel has issued a security advasetory on the bluetooth stack: 

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00128.html

They say two things are necessary to fix the problem: 
-> new firmware
-> kernel fix

However, they do not specify any fixed version for the ucode and the kernel...
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-03-30 12:37:14 UTC
> Any Linux kernel version 3.19 and higher will also need an update.
> Note: Linux kernel versions prior to 3.19 are not affected since 
> ‘LE Secure > Connections’ functionality is not supported in these older Linux kernel versions.