BleedingTooth: critical kernel Bluetooth vulnerability

Posted Oct 15, 2020 12:47 UTC (Thu) by zdzichu (subscriber, #17118)
In reply to: BleedingTooth: critical kernel Bluetooth vulnerability by rvolgers
Parent article: BleedingTooth: critical kernel Bluetooth vulnerability

I was under impression that BlueZ is _userspace_ part of the bluetooth stack. And the bugs found are in _kernel_ part, which is supposedly shared by all userspaces (BlueZ, Bluedroid, Fluoride, Gabeldorsche, etc…).
Am I wrong?

BleedingTooth: critical kernel Bluetooth vulnerability

Posted Oct 19, 2020 14:46 UTC (Mon) by WolfWings (subscriber, #56790) [Link]

There's quite a few bluetooth stacks that bypass the Linux kernel entirely, often using raw USB mode to directly grab the bluetooth dongle and have to have the relevant Linux kernel module blocked. BTstack is the most common "entirely userspace" one I've run across poking at car PC and other semi-embedded realms.