CVE-2020-25662

6.5 mediumEPSS 1.2%

Medium (6.5) in redhat enterprise linux. EPSS 1.2% chance of exploitation in the next 30 days.

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWEs: CWE-284, CWE-665
Published: 2020-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:enterprise_linux

References

https://access.redhat.com/security/cve/CVE-2020-12352
https://access.redhat.com/security/vulnerabilities/BleedingTooth
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25662
https://access.redhat.com/security/cve/CVE-2020-12352
https://access.redhat.com/security/vulnerabilities/BleedingTooth

Check your stack JSON