In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: Check dsbr size from EFI variable
Since the size of struct btintel_dsbr is already known, we can just start there instead of querying the EFI variable size. If the final result doesn't match what we expect also fail. This fixes a stack buffer overflow when the EFI variable is larger than struct btintel_dsbr.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub