In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: Check dsbr size from EFI variable
Since the size of struct btintel_dsbr is already known, we can just start there instead of querying the EFI variable size. If the final result doesn't match what we expect also fail. This fixes a stack buffer overflow when the EFI variable is larger than struct btintel_dsbr.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-obs-build | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-32-generic-64k | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub