Bug 386435

Summary:	Kernel: bluetooth Information disclosure (CVE-2011-2492)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[linux < 3.0-rc4]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:37:39 UTC

CVE-2011-2492 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2492):
  The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly
  initialize certain data structures, which allows local users to obtain
  potentially sensitive information from kernel memory via a crafted
  getsockopt system call, related to (1) the l2cap_sock_getsockopt_old
  function in net/bluetooth/l2cap_sock.c and (2) the
  rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2016-02-20 05:14:19 UTC

old kernel bug.  no GLSA required.  Not feasible to track backports of patches