Realtek Bluetooth HCI Adaptor Link Following Vulnerability Leading to Privilege Escalation

A link following vulnerability has been identified in the Realtek Bluetooth HCI Adaptor, affecting versions prior to 1.1.73.1. This vulnerability allows local attackers with regular privileges to create symbolic links that mimic the names of specific files. The adaptor then inadvertently deletes the files pointed to by these links. Attackers can exploit this arbitrary file deletion to escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to update the Bluetooth HCI Adaptor to version 1.1.73.1 or later.