• 公告ID (KylinSec-SA-2024-2912)

摘要:

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: refactor malicious adv data check

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

安全等级: Low

公告ID: KylinSec-SA-2024-2912

发布日期: 2024年6月27日

关联CVE: CVE-2021-47620  

  • 详细介绍

1. 漏洞描述

   

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: refactor malicious adv data check

Check for out-of-bound read was being performed at the end of while
num_reports loop, and would fill journal with false positives. Added
check to beginning of loop processing so that it doesn't get checked
after ptr has been advanced.

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2021-47620 KY3.4-5A kernel Unaffected
CVE-2021-47620 KY3.5.2 kernel Unaffected
CVE-2021-47620 V6 kernel Unaffected

3. 影响组件

    无

4. 修复版本

    无

5. 修复方法

   无

6. 下载链接

    无
上一篇:KylinSec-SA-2024-2911 下一篇:KylinSec-SA-2024-2913