Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50233

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4c3dbb2c312c9fafbac30d98c523b8b1f3455d78 to < dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 6.0 to ≤ *unaffected

References