7.8

CVE-2026-68479

Bluetooth: btrtl: validate firmware patch bounds

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: validate firmware patch bounds

rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the
firmware version. A malformed firmware patch shorter than the version field
can make this subtraction underflow and turn the copy into an oversized
read and write during Bluetooth setup.

The existing patch_offset + patch_length check can also wrap on 32-bit
architectures. Validate the patch length and range without arithmetic
overflow before allocating or copying the patch.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < 39e01b4addfbbe177567d6ed1dfb81f9cccb19e6
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < bda3c598ade6ea03884074b91e31608326684921
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < a4cb830e0b55ac76c849fd7840afb251f4c028fa
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < 68c5a2a19987c035eb129e627e579adafb04f637
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < 83534891c058ed71e251135072640911670869aa
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < 6744ab60dfac55d1df5733960aad5be300984301
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < f1ca750c0510bdbb504bf084d2f196ef2af92ea6
Status affected
Version db33c77dddc2ed2cff3061d0b096a9f5ab0c3647
Version < 609c5b04a28dc1b0f3af6a7bc93055135b2d2059
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.2
Status affected
Version 0
Version < 4.2
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/39e01b4addfbbe177567d6ed1dfb81f9cccb19e6
https://git.kernel.org/stable/c/bda3c598ade6ea03884074b91e31608326684921
https://git.kernel.org/stable/c/a4cb830e0b55ac76c849fd7840afb251f4c028fa
https://git.kernel.org/stable/c/68c5a2a19987c035eb129e627e579adafb04f637
https://git.kernel.org/stable/c/83534891c058ed71e251135072640911670869aa
https://git.kernel.org/stable/c/6744ab60dfac55d1df5733960aad5be300984301
https://git.kernel.org/stable/c/f1ca750c0510bdbb504bf084d2f196ef2af92ea6
https://git.kernel.org/stable/c/609c5b04a28dc1b0f3af6a7bc93055135b2d2059