Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-7356

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e4cfffb5ebc80820f46cf16a6fa5be1b436bdf2d to < ba25efe15e8fd909884e113a86c6ccd07d88256eaffected
  • 9c0826310bfb784c9bac7d1d9454e304185446c5 to < 927ef409f713929dea2b9a5ed5bb65e712be0050affected
  • 9c0826310bfb784c9bac7d1d9454e304185446c5 to < f4da3ee15de9944482382181329bb6d7335ca003affected
  • 6.1.159 to < 6.1.178affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References