In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: refactor malicious adv data check
Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-4.14.268-205.500Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-devel | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-azureUpgrade linux-awsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-hwe | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub