USN-6397-1: Linux kernel (BlueField) vulnerabilities

Daniel Moghimi discovered that some Intel(R) Processors did not properly
clear microarchitectural state after speculative execution of various
instructions. A local unprivileged user could use this to obtain to
sensitive information. (CVE-2022-40982)

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did
not properly perform permissions checks when handling HCI sockets. A
physically proximate attacker could use this to cause a denial of service
(bluetooth communication). (CVE-2023-2002)

Tavis Ormandy discovered that some AMD processors did not properly handle …

bluetooth clear cve daniel handling hci information intel kernel linux linux kernel local permissions processors sensitive sensitive information sockets speculative execution state subsystem usn vulnerabilities