CVE-2020-12352: Linux Kernel

Medium severity, CVSS 6.5. EPSS: 5.7% chance of exploitation in the next 30 days.

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Affected products

• Linux Linux Kernel: from 5.4, before 5.4.72 (fixed in 5.4.72); from 5.8.0, before 5.8.16 (fixed in 5.8.16); from 5.9.0, up to and including 5.9.13

Published 2020-11-23. Last modified 2026-06-17.