Flood of Bluetooth Malicious advertisind data

[Stephen Carr]

This problem occurred with the ugrade of the kernel to patch level 105.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: gnome-terminal 3.36.2-1ubuntu1~20.04
ProcVersionSignature: Ubuntu 5.4.0-105.119-generic 5.4.174
Uname: Linux 5.4.0-105-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu27.21
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Wed Mar 23 12:48:22 2022
ExecutablePath: /usr/libexec/gnome-terminal-server
InstallationDate: Installed on 2018-06-21 (1370 days ago)
InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Release amd64 (20180426)
ProcEnviron:
 LANG=en_AU.UTF-8
 PATH=(custom, user)
 SHELL=/bin/bash
 XDG_RUNTIME_DIR=<set>
SourcePackage: gnome-terminal
UpgradeStatus: No upgrade log present (probably fresh install)

[Stephen Carr (truck-adel)]

This is output from dmesg - thankfully it is a ring buffer.

[33294.452291] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33294.896481] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33294.897205] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33296.533192] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33298.724322] Bluetooth: hci0: Malicious advertising data. Stopping processing

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Frank Zhou (feishengfei)]

In my case, it's related with home assistant container, which hci0 is controlled by home assistant. I install HACS and passive ble monitor for receiving xiaomi LYWSD03MMC Temp/Humidity sensor.

[Stephen Carr (truck-adel)]

I had to reboot my laptop and for a while there seemed no problem the flood of Malicious data in the system log - then suddenly it started again at the rate of 17,000 lines per hour.

The Bluetooth device is part of the Intel AC1365 combo unit.

I have attached the start of the boot log and a filtered log with just the Bluetooth entries.

[Andras Tim (tia)]

The `gnome-terminal` is not affected by the kernel's Bluetooth issue...

[Frank Zhou (feishengfei)]

seems fixed on 5.4.0-107-generic:

frankzhou@pluto:~$ dmesg | grep Bluetooth | wc -l
62
frankzhou@pluto:~$ uptime
 11:06:54 up 3:58, 2 users, load average: 0.28, 0.23, 0.25
frankzhou@pluto:~$ uname -a
Linux pluto 5.4.0-107-generic #121~18.04.1-Ubuntu SMP Thu Mar 24 17:21:33 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

[Stephen Carr (truck-adel)]

I also notice it seems fixed in 5.4.0-107-generic,

Thanks for the quick fix now I concentrate on debugging Bluetooth problems with my Logitech M590 moues.
Regards
Stephen Carr