CVE-2011-2492

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.0-rc4

Description The bluetooth subsystem in the Linux kernel does not properly initialize certain data structures, allowing local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call. This issue is related to the l2cap sock getsockopt old function in net/bluetooth/l2cap sock.c and the rfcomm sock getsockopt old function in net/bluetooth/rfcomm/sock.c.

Recommendations For Linux kernel versions prior to 3.0-rc4, consider updating to version 3.0-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the bluetooth subsystem to minimize the risk of exploitation.