In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
In 'mgmt_hci_cmd_sync()', check whether the size of parameters passed in 'struct mgmt_cp_hci_cmd_sync' matches the total size of the data (i.e. 'sizeof(struct mgmt_cp_hci_cmd_sync)' plus trailing bytes). Otherwise, large invalid 'params_len' will cause 'hci_cmd_sync_alloc()' to do 'skb_put_data()' from an area beyond the one actually passed to 'mgmt_hci_cmd_sync()'.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidia | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1012-oem | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub