CVE-2020-12352

Name of the Vulnerable Software and Affected Versions: BlueZ (affected versions not specified) Linux kernel (affected versions not specified)

Description: The issue is related to improper access control in BlueZ and a vulnerability in the Linux kernel's net/bluetooth/a2mp.c component, which lacks protection of service data. This could allow an unauthenticated user or a remote attacker to potentially enable information disclosure via adjacent access or by using specially crafted AMP packets.

Recommendations: For BlueZ, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Linux kernel, consider restricting access to the net/bluetooth/a2mp.c component to minimize the risk of exploitation until a patch is available.