{"id":90749,"date":"2020-10-16T17:00:54","date_gmt":"2020-10-16T14:00:54","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/bluetooth-flaw-in-linux-kernel-allows-nearby-hackers-to-execute-code\/"},"modified":"2020-10-16T17:00:54","modified_gmt":"2020-10-16T14:00:54","slug":"bluetooth-flaw-in-linux-kernel-allows-nearby-hackers-to-execute-code","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/bluetooth-flaw-in-linux-kernel-allows-nearby-hackers-to-execute-code\/","title":{"rendered":"#Bluetooth flaw in Linux kernel allows nearby hackers to execute code"},"content":{"rendered":"

“#Bluetooth flaw in Linux kernel allows nearby hackers to execute code<\/strong>”<\/p>\n

\n
\n
\n
\"Linux\"
\n Credit: Pixabay\/CC0 Public Domain
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

Google engineer Andy Nguyen is reporting via a Twitter<\/a> thread that a new security vulnerability has been found in Linux operating systems that run a Bluetooth software stack called BlueZ. Nguyen has named the vulnerability BleedingTooth and claims in his Twitter post that the vulnerability allows nearby hackers to conduct zero-click root-level code execution.<\/p>\n

Linux is an operating system very similar to Unix\u2014it became popular over a decade ago as a research and educational tool due to its open-source licensing and zero cost. In more recent years, it has been used to create dedicated app<\/a>lications\u2014NASA uses it for many of its space applications, for example. It has also become popular for companies making Internet-of-Things (IoT) devices because it allows them to avoid royalty fees. <\/p>\n

In this new effort, Nguyen has found a vulnerability that allows hackers within the range of a Bluetooth signal to gain root access to computers or devices running BlueZ. Notably, many IoT devices use BlueZ to allow users to communicate with their devices. Intel, a major backer of the group behind BlueZ, has announced that it is characterizing the vulnerability as a flaw that provides an escalation of privileges or the disclosure of information.<\/p>\n

Because it is still a new discovery, little is known about the vulnerability\u2014still, the team at BlueZ has released a patch for it and made it freely available. Also, Intel has issued an advisory on its web page, noting that the severity has been classified as high.<\/p>\n

Despite the severity of the vulnerability, it is not considered to be something that the user community should worry about. A hacker would have to gain access to a building housing such a device or computer and have the necessary knowledge and equipment to take advantage of the situation. And there would also be the issue of motive\u2014not many hackers are interested in taking over an IoT coffeepot sitting on someone’s kitchen counter. As with many computer vulnerabilities, those most at risk are those who work with very sensitive or valuable information.\n <\/p>\n\n

\n

Vulnerability found in Apple’s T2 security chip\n <\/p><\/div>\n

\n

\n \u00a9 2020 Science<\/a> X Network<\/p>\n

<\/p>\n

\n

Citation<\/strong>:
\n Bluetooth flaw in Linux kernel allows nearby hackers to execute code (2020, October 16)
\n retrieved 16 October 2020
\n from https:\/\/techxplore.com\/news<\/a>\/2020-10-bluetooth-flaw-linux-kernel-nearby.html<\/p>\n

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
\n part may be reproduced without the written permission. The content is provided for information purposes only.<\/p><\/div>\n<\/p><\/div>\n