Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2021-47620

Bluetooth: refactor malicious adv data check

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.4.302, 4.9.300, 4.14.265, 4.19.228, 5.4.176, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    Version range not reported

  • Linux Linux

    From 4.4.300 · fixed in 4.4.302; From 4.9.298 · fixed in 4.9.300; From 4.14.263 · fixed in 4.14.265; From 4.19.226 · fixed in 4.19.228; From 5.4.174 · fixed in 5.4.176; From 5.10.94 · fixed in 5.10.96; From 5.15.17 · fixed in 5.15.19; From 5.16.3 · fixed in 5.16.5

References 9

git.kernel.org