TI-2019-02587 Aliases CVE-2019-3459 GHSA-mxj7-853v-cxhh

A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

LOW 32CWE-125Published 2019-04-11 · Updated 2024-08-04

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Partial Red Hat: 16 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-125 and the CVSS impact.

Summary

A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

Why it matters now

EPSS 0.01827 78th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Linux (Linux): 5.1-rc1Red Hat: 5 advisoriesRed Hat: 16 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Linux	Linux	before 5.1-rc1; fixed in 5.1-rc1	5.1-rc1	Patch available	CNA

Linux VendorLinux Affected before 5.1-rc1; fixed in 5.1-rc1 Fixed in 5.1-rc1 Patch available CNA

CPE configurations NVD · 30

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel::::::::	up to 5.1	Vulnerable	Linux
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::	14.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::	16.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::	18.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*	18.10	Vulnerable	Canonical
cpe:2.3:a:redhat:codeready_linux_builder:8.0:::::::*	8.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*	5.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*	6.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*	7.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*	8.0	Vulnerable	Red Hat

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 5.1 Vulnerable ·Linux
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Versions 18.10 Vulnerable ·Canonical
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat

Show 20 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*	7.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:::::::*	8.1	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:::::::*	8.2	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:::::::*	8.4	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:::::::*	7	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:::::::*	8	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:::::::*	7	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:::::::*	8	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:::::::*	8.2	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:::::::*	8.4	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:::::::*	8.2	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:::::::*	8.4	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*	7.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:::::::*	8.2	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:::::::*	8.4	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:::::::*	8.2	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:::::::*	8.4	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*	7.0	Vulnerable	Red Hat
cpe:2.3:o:redhat:enterprise_mrg:2.0:::::::*	2.0	Vulnerable	Red Hat
cpe:2.3:o:debian:debian_linux:8.0:::::::*	8.0	Vulnerable	Debian

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:* Versions 8 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:* Versions 8 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian

Remediation

Fix · CNA Linux (Linux) Fixed in 5.1-rc1

Red Hat 5 advisories

RHSA-2020:0740 Released 2020-03-09 · Red Hat rating Important
kernel-alt security and bug fix update
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.18.1.el7a, kernel-abi-whitelists-4.14.0-115.18.1.el7a, kernel-alt-4.14.0-115.18.1.el7a +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.18.1.el7a, kernel-tools-libs-devel-4.14.0-115.18.1.el7a
RHSA-2019:3517 Released 2019-11-05 · Red Hat rating Important
kernel security, bug fix, and enhancement update
- Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-147.el8
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-147.el8, kernel-4.18.0-147.el8, kernel-abi-whitelists-4.18.0-147.el8 +19
RHSA-2019:3309 Released 2019-11-05 · Red Hat rating Important
kernel-rt security and bug fix update
- Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-147.rt24.93.el8, kernel-rt-core-4.18.0-147.rt24.93.el8, kernel-rt-debug-4.18.0-147.rt24.93.el8 +7
- Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-147.rt24.93.el8, kernel-rt-core-4.18.0-147.rt24.93.el8, kernel-rt-debug-4.18.0-147.rt24.93.el8 +9

Show 2 more Red Hat advisories

RHSA-2019:2043 Released 2019-08-07 · Red Hat rating Important
kernel-rt security and bug fix update
- Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1062.rt56.1022.el7, kernel-rt-debug-3.10.0-1062.rt56.1022.el7, kernel-rt-debug-devel-3.10.0-1062.rt56.1022.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1062.rt56.1022.el7, kernel-rt-debug-3.10.0-1062.rt56.1022.el7, kernel-rt-debug-devel-3.10.0-1062.rt56.1022.el7 +7
RHSA-2019:2029 Released 2019-08-06 · Red Hat rating Important
kernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1062.el7, kernel-3.10.0-1062.el7, kernel-abi-whitelists-3.10.0-1062.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-1062.el7, kernel-3.10.0-1062.el7, kernel-abi-whitelists-3.10.0-1062.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.el7
- Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1062.el7, kernel-3.10.0-1062.el7, kernel-abi-whitelists-3.10.0-1062.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1062.el7, kernel-tools-libs-devel-3.10.0-1062.el7
- Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1062.el7, kernel-3.10.0-1062.el7, kernel-abi-whitelists-3.10.0-1062.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1062.el7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 5	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Will not fix
Red Hat Enterprise MRG 2	Affected	No fix planned: Will not fix
Red Hat CodeReady Linux Builder (v. 8)	Fixed	RHSA-2019:3517
Red Hat Enterprise Linux BaseOS (v. 8)	Fixed	RHSA-2019:3517
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux Client Optional (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux ComputeNode (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux ComputeNode Optional (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux Real Time (v. 8)	Fixed	RHSA-2019:3309
Red Hat Enterprise Linux Real Time for NFV (v. 8)	Fixed	RHSA-2019:3309
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux Server Optional (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux Workstation Optional (v. 7)	Fixed	RHSA-2019:2029
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)	Fixed	RHSA-2020:0740
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)	Fixed	RHSA-2020:0740
Red Hat Enterprise Linux for Real Time (v. 7)	Fixed	RHSA-2019:2043
Red Hat Enterprise Linux for Real Time for NFV (v. 7)	Fixed	RHSA-2019:2043

Timeline

2026-10-02 Threatist record created from CVE-2019-3459
2026-10-03 Alias added: GHSA-mxj7-853v-cxhh

References

Exploit 1

[oss-security] 20190111 Linux kernel: Bluetooth: two remote infoleaks (CVE-2019-3459, CVE-2019-3460)

Patch 2

Advisory 15

Other 1

[linux-bluetooth] 20190110 [PATCH 1/2] Bluetooth: check message types in l2cap_get_conf_opt

TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3

See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 30

Remediation

Red Hat 5 advisories

Vendor assessments

Red Hat

Timeline

References

Exploit 1

Patch 2

Advisory 15

Other 1

More Linux Kernel vulnerabilities

Sources