In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store '…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtek_data'. If btrtl driver is used with btusb, then memory for private hci data is allocated in btusb. But no private data is allocated after hci_dev, when btrtl is used with hci_h5. This commit adds memory allocation for hci_h5 case. =================================================…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0c657e641df1e77d6087688190f632cad9c0439b Patch
- https://git.kernel.org/stable/c/2f232bc389a4f5943c40733582f9edf77b89e499 Patch
- https://git.kernel.org/stable/c/dd163fa34c483f1674aa2510accce11a224f649e Patch
- https://git.kernel.org/stable/c/de4e88ec58c4202efd1f02eebb4939bbf6945358 Patch
- https://git.kernel.org/stable/c/0c657e641df1e77d6087688190f632cad9c0439b Patch
- https://git.kernel.org/stable/c/2f232bc389a4f5943c40733582f9edf77b89e499 Patch
- https://git.kernel.org/stable/c/dd163fa34c483f1674aa2510accce11a224f649e Patch
- https://git.kernel.org/stable/c/de4e88ec58c4202efd1f02eebb4939bbf6945358 Patch
Timeline
- nvd_ingest NVD