Intel(R) Wireless Bluetooth(R) Vulnerability - CVE-2020-12321

[Phil_Swiss]

 Hello

We are searching a driver to solve the security issue "Intel(R) Wireless Bluetooth(R) Vulnerability - CVE-2020-12321". We should upgrade to version 22.xxx. The driver that we distribute is version 21.10 (Netwtw08).

We found a new driver on HP.com for the model HP Elitebook 840 G5. But the driver update didn't work.  In the driver INI-File - in the section for our hardware type (24FD) - there is only an older driver version defined. So the installation doesn't install the new Version of the driver. We also already searched on INTEL.com.

- Is there any chance to get a newer driver version to solve the vulnerability?

- Is our hardware type / revision affected or not?

Thx Phil

[banhien]

@Phil_Swiss 

Please check your updates history. I believe on 11 Jan 2021 Intel or HP updated my Network card (automatically, my machine also is an HP 840 G5). HP does know the problem

          https://vulmon.com/vulnerabilitydetails?qid=CVE-2020-12321

HP: HPSBHF03700 rev. 1 - Intel® Wireless Bluetooth® November 2020 Security Update

Intel has informed HP of potential security vulnerabilities identified in Intel® Wireless Bluetooth® products which might allow escalation of privilege or denial of service Intel is releasing software updates to mitigate these potential vulnerabilities ...

Regards.