CVE-2023-54210

CVE-2023-54210: In the Linux kernel, Bluetooth HCI path hci_sync: use-after-free in dbg for hci_remove_adv_monitor() is reported by KASAN. The issue stems from msft_remove_monitor() freeing the monitor structure, enabling a use-after-free via a call chain: hci_remove_adv_monitor() → msft_remove_m...

CVE-2022-48947

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases multiple times and eventually it will wrap around the maximum number i.e., 255. This patch prevents this by adding a boundary check...

CVE-2022-48947 Bluetooth: L2CAP: Fix u8 overflow

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases multiple times and eventually it will wrap around the maximum number i.e., 255. This patch prevents this by adding a boundary check...