Every CVE Search/ Get API key

CVE-2020-25661

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth...

7.5 High

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.79%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Record
CVE-2020-25661
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
EUVDEUVD-2020-18323 7.5

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Record
EUVD-2020-18323
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-5jpw-97pv-5g28 8.8

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth...

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Record
GHSA-5jpw-97pv-5g28
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
NVD 7.5

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Record
CVE-2020-25661
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
8.3 HighAV:A/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-843
Updated
2026-11-02
OSVRHSA-2020:4685 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2020:4685
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4686 8.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2020:4686
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-25661 8.8

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Record
UBUNTU-CVE-2020-25661
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-abi-whitelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
Show 63 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.el8_3
0:4.18.0-240.1.1.el8_3
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 3 CVEs
 before 0:4.18.0-240.1.1.rt7.55.el8_3
0:4.18.0-240.1.1.rt7.55.el8_3
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-25661 is a high vulnerability (CVSS 7.5) in Linux Kernel, published November 5, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. No source names a fixed version.

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open