Ubuntu
linux package

  1. Bug #714846
  2. Comment #0

Comment 0 for bug 714846

Revision history for this message
Brad Figg (brad-figg) wrote :

he hci_uart_tty_open function in the HCI UART driver
(drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly
other versions, does not verify whether the tty has a write operation,
which allows local users to cause a denial of service (NULL pointer
dereference) via vectors related to the Bluetooth driver.