Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38303

Bluetooth: eir: Fix possible crashes on eir_create_adv_data

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER without checking if that would fit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 to < 2d4588f55cc10fc228f3b46469dbfb3f0a8b13c8affected
  • 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 to < e98ce4b70beab73563d82bd21821024140e6da06affected
  • 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 to < 2af40d795d3fb0ee5c074b7ac56ab22402aa6e4faffected
  • 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 to < b9db0c27e73b7c8a19384a44af527edfda74ff3daffected
  • 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 to < 47c03902269aff377f959dc3fd94a9733aa31d6eaffected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 6.1.168 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References