kernel: Bluetooth: HCI: Fix global-out-of-bounds

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. This vulnerability arises from an error in how the hciinitstagesync function processes certain variable-length arrays, causing it to access memory beyond its allocated boundaries. A local attacker could...

SUSE CVE-2023-28866

In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...