In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: Check dsbr size from EFI variable
Since the size of struct btintel_dsbr is already known, we can just start there instead of querying the EFI variable size. If the final result doesn't match what we expect also fail. This fixes a stack buffer overflow when the EFI variable is larger than struct btintel_dsbr.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-lg | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14 | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub