NetSight
IP …
high8.1

CVE-2021-47620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performe…

Impact

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.302
from 4.5 before 4.9.300
from 4.10 before 4.14.265
from 4.15 before 4.19.228
from 4.20 before 5.4.176
from 5.5 before 5.10.96

Weakness classification

CWE-125

References