An attacker within bluetooth transmission range can cause a stack buffer overflow in the Bluetooth system of the Linux kernel while processing pending L2CAP configuration responses from a client. An unauthenticated user able to connect to a system via Bluetooth could use this flaw to potentially execute arbitrary code with root privileges on the system. External References: https://www.armis.com/blueborne/ https://access.redhat.com/security/vulnerabilities/blueborne https://access.redhat.com/solutions/3177231 https://access.redhat.com/blogs/product-security/posts/blueborne An upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e860d2c904d1a9f38a24eb44c9f34b8f915a6ea3
Acknowledgments: Name: Armis Labs
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1490906]
This issue has been addressed in the following products: Red Hat Enterprise Linux 6.4 Advanced Update Support Via RHSA-2017:2683 https://access.redhat.com/errata/RHSA-2017:2683
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2017:2679 https://access.redhat.com/errata/RHSA-2017:2679
This issue has been addressed in the following products: Red Hat Enterprise Linux 7.3 Extended Update Support Via RHSA-2017:2680 https://access.redhat.com/errata/RHSA-2017:2680
This issue has been addressed in the following products: Red Hat Enterprise Linux 6.7 Extended Update Support Via RHSA-2017:2682 https://access.redhat.com/errata/RHSA-2017:2682
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2017:2681 https://access.redhat.com/errata/RHSA-2017:2681
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2017:2704 https://access.redhat.com/errata/RHSA-2017:2704
This issue has been addressed in the following products: Red Hat Enterprise MRG 2 Via RHSA-2017:2705 https://access.redhat.com/errata/RHSA-2017:2705
This issue has been addressed in the following products: Red Hat Enterprise Linux 7.2 Extended Update Support Via RHSA-2017:2706 https://access.redhat.com/errata/RHSA-2017:2706
This issue has been addressed in the following products: Red Hat Enterprise Linux 6.5 Advanced Update Support Red Hat Enterprise Linux 6.5 Telco Extended Update Support Via RHSA-2017:2707 https://access.redhat.com/errata/RHSA-2017:2707
This issue has been addressed in the following products: Red Hat Enterprise Linux 6.2 Advanced Update Support Via RHSA-2017:2732 https://access.redhat.com/errata/RHSA-2017:2732
This issue has been addressed in the following products: Red Hat Enterprise Linux 6.6 Advanced Update Support Red Hat Enterprise Linux 6.6 Telco Extended Update Support Via RHSA-2017:2731 https://access.redhat.com/errata/RHSA-2017:2731
Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5. This issue affects the version of the kernel packages as shipped with Red Hat Enterprise Linux 6 and 7, and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2 will address this issue. For further information please refer to the vulnerability article in the Customer Portal: https://access.redhat.com/security/vulnerabilities/blueborne