摘要:
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
安全等级: Low
公告ID: KylinSec-SA-2023-1261
发布日期: 2023年4月11日
关联CVE: CVE-2023-28866
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2023-28866 | KY3.4-4A | kernel | Unaffected |
| CVE-2023-28866 | KY3.4-5A | kernel | Unaffected |
| CVE-2023-28866 | KY3.5.1 | kernel | Unaffected |
