CVE-2020-25662

State: Published
Severity: 5.3 Medium
Published: Nov 5, 2020
Updated: Aug 4, 2024
Reserved: Sep 16, 2020

Description

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	redhat

Weaknesses

CWE-284
CWE-665

Affected Products

Product	Versions
kernelRed Hat	kernel-4.18.0-240.el8Affected

References

https://access.redhat.com/security/vulnerabilities/BleedingTooth
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25662
https://access.redhat.com/security/cve/CVE-2020-12352

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.