CVE:CVE-2017-15868
CNNVD:CNNVD-201712-072
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 3.19之前的版本中的net/bluetooth/bnep/core.c文件的‘bnep_add_connection’函数存在安全漏洞，该漏洞源于程序没有确保l2cap套字节可用。本地攻击者可借助特制的应用程序利用该漏洞获取权限。
solution:Upgrade linux linux_kernel to a higher version than 3.2.97,3.10.108,3.16.52,3.18.64,and avoid the version [3.2,3.2.97),[3.3,3.10.108),[3.11,3.16.52),[3.17,3.18.64); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0