Ubuntu
linux-signed package

Flood of Bluetooth Malicious advertisind data

Bug #1966007 reported by Stephen Carr on 2022-03-23

24

This bug affects 4 people

Affects		Status	Importance	Assigned to	Milestone
	linux-signed (Ubuntu)	Confirmed	Undecided	Unassigned

Bug Description

This problem occurred with the ugrade of the kernel to patch level 105.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: gnome-terminal 3.36.2-1ubuntu1~20.04
ProcVersionSignature: Ubuntu 5.4.0-105.119-generic 5.4.174
Uname: Linux 5.4.0-105-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu27.21
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Wed Mar 23 12:48:22 2022
ExecutablePath: /usr/libexec/gnome-terminal-server
InstallationDate: Installed on 2018-06-21 (1370 days ago)
InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Release amd64 (20180426)
ProcEnviron:
LANG=en_AU.UTF-8
PATH=(custom, user)
SHELL=/bin/bash
XDG_RUNTIME_DIR=<set>
SourcePackage: gnome-terminal
UpgradeStatus: No upgrade log present (probably fresh install)

Tags:

Revision history for this message

Stephen Carr (truck-adel) wrote on 2022-03-23:

#1

Dependencies.txt Edit (24.3 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1.3 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (84.2 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (1.4 KiB, text/plain; charset="utf-8")

Revision history for this message

Stephen Carr (truck-adel) wrote on 2022-03-23:

#2

This is output from dmesg - thankfully it is a ring buffer.

[33294.452291] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33294.896481] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33294.897205] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33296.533192] Bluetooth: hci0: Malicious advertising data. Stopping processing
[33298.724322] Bluetooth: hci0: Malicious advertising data. Stopping processing

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-03-25:

#3

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnome-terminal (Ubuntu):
status:	New → Confirmed

Revision history for this message

Frank Zhou (feishengfei) wrote on 2022-03-25:

#4

In my case, it's related with home assistant container, which hci0 is controlled by home assistant. I install HACS and passive ble monitor for receiving xiaomi LYWSD03MMC Temp/Humidity sensor.

Revision history for this message

Stephen Carr (truck-adel) wrote on 2022-03-28:

#5

Boot log Edit (162.8 KiB, text/plain)

I had to reboot my laptop and for a while there seemed no problem the flood of Malicious data in the system log - then suddenly it started again at the rate of 17,000 lines per hour.

The Bluetooth device is part of the Intel AC1365 combo unit.

I have attached the start of the boot log and a filtered log with just the Bluetooth entries.

Revision history for this message

Stephen Carr (truck-adel) wrote on 2022-03-28:

#6

Bluetootth entries from boot.log Edit (7.2 KiB, text/plain)

Revision history for this message

Andras Tim (tia) wrote on 2022-03-29:

#7

The `gnome-terminal` is not affected by the kernel's Bluetooth issue...

affects:

gnome-terminal (Ubuntu) → linux-signed (Ubuntu)

Revision history for this message

Frank Zhou (feishengfei) wrote on 2022-04-01:

#8

seems fixed on 5.4.0-107-generic:

frankzhou@pluto:~$ dmesg | grep Bluetooth | wc -l
62
frankzhou@pluto:~$ uptime
11:06:54 up 3:58, 2 users, load average: 0.28, 0.23, 0.25
frankzhou@pluto:~$ uname -a
Linux pluto 5.4.0-107-generic #121~18.04.1-Ubuntu SMP Thu Mar 24 17:21:33 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

Revision history for this message

Stephen Carr (truck-adel) wrote on 2022-04-01:

#9

I also notice it seems fixed in 5.4.0-107-generic,

Thanks for the quick fix now I concentrate on debugging Bluetooth problems with my Logitech M590 moues.
Regards
Stephen Carr

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.