CVE-2017-1000251

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-09-12 · updated 2026-06-17
Weakness: CWE-787

Description

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Affected products

Debian Linux: 8.0, 9.0
Linux kernel: from 2.6.32 before 3.2.94; from 3.3 before 3.16.49; from 3.17 before 3.18.71; from 3.19 before 4.1.45; from 4.2 before 4.4.88; from 4.5 before 4.9.50 — fixed in 3.16.49, 3.18.71, 3.2.94, 4.1.45, 4.12.13, 4.13.2
NVIDIA Jetson Tk1: r21, r24
NVIDIA Jetson Tx1: r21, r24
RedHat Enterprise Linux Desktop: 6.0, 7.0
RedHat Enterprise Linux Server: 6.0, 7.0
RedHat Enterprise Linux Server Aus: 6.2, 6.4, 6.6, 7.2, 7.3, 7.4 (+2)
RedHat Enterprise Linux Server Eus: 6.7, 7.2, 7.3, 7.4, 7.5, 7.6 (+1)
RedHat Enterprise Linux Server Tus: 6.5, 6.6, 7.2, 7.3, 7.4, 7.6 (+1)
RedHat Enterprise Linux Workstation: 6.0, 7.0

How to fix

Upgrade to a fixed version: Linux kernel 3.16.49, 3.18.71, 3.2.94, 4.1.45. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-1000251 or the next vulnerability affects your stack