In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: refactor malicious adv data check
Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade gfs2-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-azure-fde-5.15Upgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-iotUpgrade linux-awsUpgrade linuxUpgrade linux-bluefield | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub