CVE-2023-7356
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.178, 6.6.145
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.
Timeline
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- Linux Linux
From e4cfffb5ebc80820f46cf16a6fa5be1b436bdf2d · fixed in ba25efe15e8fd909884e113a86c6ccd07d88256e; From 9c0826310bfb784c9bac7d1d9454e304185446c5 · fixed in 927ef409f713929dea2b9a5ed5bb65e712be0050; From 9c0826310bfb784c9bac7d1d9454e304185446c5 · fixed in f4da3ee15de9944482382181329bb6d7335ca003; From 6.1.159 · fixed in 6.1.178
- Linux Linux
6.6
- KernelLinux
fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145