Bug 661954

Summary:	INTEL-SA-00128: Bluetooth pairing vulnerability
Product:	Gentoo Security	Reporter:	Till Schäfer <till2.schaefer>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	normal	CC:	holgersson, jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Till Schäfer 2018-07-24 13:09:50 UTC

Intel has issued a security advasetory on the bluetooth stack: 

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00128.html

They say two things are necessary to fix the problem: 
-> new firmware
-> kernel fix

However, they do not specify any fixed version for the ucode and the kernel...

Comment 1 Sam James archtester

2020-03-30 12:37:14 UTC

> Any Linux kernel version 3.19 and higher will also need an update.
> Note: Linux kernel versions prior to 3.19 are not affected since 
> ‘LE Secure > Connections’ functionality is not supported in these older Linux kernel versions.