CVE-2012-6544

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6

Description The Bluetooth protocol stack in the Linux kernel does not properly initialize certain structures, allowing local users to obtain sensitive information from kernel stack memory via a crafted application that targets the L2CAP or HCI implementation.

Recommendations For Linux kernel versions prior to 3.6, update to version 3.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the L2CAP and HCI implementations until a patch is available.