Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit btintel_pcie_submit_rx() used frbd_index > rxq->count to guard the FRBD array access, allowing frbd_index == rxq->count to pass through and index one element past the end of the array. Change the check to >= rxq->count so every out-of-range index is rejected. This issue was reported by Claude Mythos.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < b5214d72bfdf8ef7744d0c8147e6ebb09b36b259affectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < 18464860ce27af0dccd2fc72830610b85b518cffaffectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < de4c3c72bcc6e8474f70c22427f94ca44bccd890affectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765affected
Linux Linux
Default version status: affected
6.10affected0 to < 6.10unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected