CVE-2019-10207 MEDIUM

CVE-2019-10207

Vendor Red Hat
Product kernel
Weakness CWE-476
Published November 25, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.

Key dates

02Disclosure timeline

November 25, 2019 CVE published
August 4, 2024 Record updated