Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-47620

Bluetooth: refactor malicious adv data check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 048acfa4daf167b007b6bd8bef474e90c2282a5f to < 305e92f525450f3e1b5f5c9dc7eadb152d66a082affected
  • 7d4238edd3bf8b8c75571cc3b382bc10438ac588 to < 7889b38a7f21ed19314f83194622b195d328465caffected
  • 185c77cbb53bc7481acc5a0b4e6119bbe393d561 to < 5a539c08d743d9910631448da78af5e961664c0eaffected
  • 4a1491432394b22e585a185ffca49086e4046aae to < 8819f93cd4a443dfe547aa622b21f723757df3fbaffected
  • 24161b9c43de966789d5956428f45002d10f878e to < 835d3706852537bf92eb23eb8635b8dee0c0aa67affected
  • ffc9019bd991707701273c2e5d8aed472229fc4d to < 83d5196b65d1b29e27d7dd16a3b9b439fb1d2dbaaffected
  • 2de0e6a71ceb056e17e4684dce8b7640367996f9 to < bcea886771c3f22a590c8c8b9139a107bd7f1e1caffected
  • 640a476e38fce6c70c738ac09e5167e34f570303 to < 5c968affa804ba98c3c603f37ffea6fba618025eaffected
  • 3a56ef719f0b9682afb8a86d64b2399e36faa4e6 to < 899663be5e75dc0174dc8bda0b5e6826edf0b29aaffected

Linux Linux

Default version status: unaffected

  • 4.4.300 to < 4.4.302affected
  • 4.9.298 to < 4.9.300affected
  • 4.14.263 to < 4.14.265affected
  • 4.19.226 to < 4.19.228affected
  • 5.4.174 to < 5.4.176affected
  • 5.10.94 to < 5.10.96affected
  • 5.15.17 to < 5.15.19affected
  • 5.16.3 to < 5.16.5affected

References