Linux Bluetooth HCI Event Buffer Overflow DoS

The vulnerability of the hciconnCompleteEvt function in the net/bluetooth/hcievent.c module of the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

UBUNTU-CVE-2022-49139

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hcisyncconncompleteevt This event is just specified for SCO and eSCO link types. On the reception of a HCISynchronousConnectionComplete for a BDADDR of an existing LE connection, LE link type and ...

PT-2022-29359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a null pointer dereference on hci sync conn complete evt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...