In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
In 'mgmt_hci_cmd_sync()', check whether the size of parameters passed in 'struct mgmt_cp_hci_cmd_sync' matches the total size of the data (i.e. 'sizeof(struct mgmt_cp_hci_cmd_sync)' plus trailing bytes). Otherwise, large invalid 'params_len' will cause 'hci_cmd_sync_alloc()' to do 'skb_put_data()' from an area beyond the one actually passed to 'mgmt_hci_cmd_sync()'.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kernel-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-apple | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.14Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-64k-6.14 | Jul 7, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub