Vulnerability · Published Nov 5, 2020 · Assigned by redhat

CVE-2020-25661

High 7.5

In plain English

A high-severity type confusion in kernel from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.8%top 21.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	kernel	kernel-4.18.0-240.el8

Weakness: CWE-843 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://access.redhat.com/security/vulnerabilities/BleedingTooth x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25661 x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2020-12351 x_refsource_CONFIRM