VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel. 

Advisory: CVE-2017-1000251
  Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-1000251
  CVSS severity score: 8.3/10.0
  Description:

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 3.3-rc1 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.



This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.