Read the docs
TI-2020-15005 Aliases CVE-2020-24490

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially…

Priority LOW 33Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.

Why it matters now

EPSS 0.02241 82nd percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—BlueZ Advisoryall Linux kernel versions that support BlueZ—No fix listedCNA
  • BlueZ Advisory Vendor— Affected all Linux kernel versions that support BlueZ Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:bluez:bluez:-:*:*:*:*:*:*:*not specified by NVDVulnerableBlueZ
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*4.19 to before 4.19.137; 4.20 to before 5.4.56; 5.5.0 to before 5.7.13Running onLinux
  • cpe:2.3:a:bluez:bluez:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BlueZ
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 4.19 to before 4.19.137; 4.20 to before 5.4.56; 5.5.0 to before 5.7.13 Running on ·Linux

Remediation

Red Hat 2 advisories

  • RHSA-2020:4685 Released 2020-11-04 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-240.1.1.el8_3
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-240.1.1.el8_3, kernel-4.18.0-240.1.1.el8_3, kernel-abi-whitelists-4.18.0-240.1.1.el8_3 +19
  • RHSA-2020:4686 Released 2020-11-04 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-240.1.1.rt7.55.el8_3, kernel-rt-core-4.18.0-240.1.1.rt7.55.el8_3, kernel-rt-debug-4.18.0-240.1.1.rt7.55.el8_3 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-240.1.1.rt7.55.el8_3, kernel-rt-core-4.18.0-240.1.1.rt7.55.el8_3, kernel-rt-debug-4.18.0-240.1.1.rt7.55.el8_3 +9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2020:4685
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2020:4685
Red Hat Enterprise Linux Real Time (v. 8)Fixed RHSA-2020:4686
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2020:4686
Not affected: 4 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise MRG 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-24490

References

Patch 1

  • TI-2020-16504 In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine… CVSS 3.1HIGH 8.6
  • TI-2024-08171 Improper access control in BlueZ CVSS 3.1HIGH 8.8
  • TI-2022-00141 Memory corruption in bluez CVSS 3.1HIGH 8.8
  • TI-2021-19345 An issue was discovered in gatt-database.c in BlueZ 5.61. CVSS 3.1CRITICAL 9.1
  • TI-2019-06435 A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. CVSS 3.1HIGH 8.8
  • TI-2023-27461 Heap-based buffer overflow in BlueZ CVSS 3.1HIGH 8.0
See all 36 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences