Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Valid indices into txq->urbd0s/tfds/bufs are 0..txq->count-1, so tfd_index == txq->count is already out of range. Change the guard in btintel_pcie_msix_tx_handle() from '> txq->count' to '>= txq->count'. This issue was reported by Claude Mythos.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < 72bbd7c815ef92399b7b109977ae4669ce22ee6eaffectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < 932a87444107e6724d808082676bba5c915c98adaffectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < a641201a9b4d69ee8a7ef35f7aa597dddee6b9eeaffectedc2b636b3f788d10486a6691ad6dd3ec4c93bd78e to < 3dd1b41f96aad08444be1b7626c89de2b9f2abd4affected
Linux Linux
Default version status: affected
6.10affected0 to < 6.10unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected