In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
In 'mgmt_hci_cmd_sync()', check whether the size of parameters passed in 'struct mgmt_cp_hci_cmd_sync' matches the total size of the data (i.e. 'sizeof(struct mgmt_cp_hci_cmd_sync)' plus trailing bytes). Otherwise, large invalid 'params_len' will cause 'hci_cmd_sync_alloc()' to do 'skb_put_data()' from an area beyond the one actually passed to 'mgmt_hci_cmd_sync()'.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-marvell | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-awsUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.14 | Jul 7, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub