-

CVE-2026-80759

Bluetooth: hci_aml: validate firmware segment lengths

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_aml: validate firmware segment lengths

aml_download_firmware() reads two lengths from the firmware header and
uses them to build pointers before checking that the header and segment
data are present. A truncated or inconsistent firmware image can make
the driver read past firmware->data while constructing TCI commands.

Reject images shorter than the header and ensure that the ICCM and DCCM
ranges fit within the loaded firmware before downloading either segment.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 37bac77e4649e8158698a60addc22ec4faf5649a
Version < 7733b01ed13685773ccda91035a46f87d4cfef7c
Status affected
Version 37bac77e4649e8158698a60addc22ec4faf5649a
Version < e1534d49a7b8ba728e84b020f6d802aa1cb759d9
Status affected
Version 37bac77e4649e8158698a60addc22ec4faf5649a
Version < 6c70253462902d835e843b470f74aa816d60af80
Status affected
Version 37bac77e4649e8158698a60addc22ec4faf5649a
Version < 2763b8bcb504e30ec955474f51b99ce42fc62f3b
Status affected
Version 37bac77e4649e8158698a60addc22ec4faf5649a
Version < 2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.12.*
Version 6.12.106
Status unaffected
Version <= 6.18.*
Version 6.18.47
Status unaffected
Version <= 7.1.*
Version 7.1.11
Status unaffected
Version <= 7.2.*
Version 7.2.1
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.063
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/7733b01ed13685773ccda91035a46f87d4cfef7c
https://git.kernel.org/stable/c/e1534d49a7b8ba728e84b020f6d802aa1cb759d9
https://git.kernel.org/stable/c/6c70253462902d835e843b470f74aa816d60af80
https://git.kernel.org/stable/c/2763b8bcb504e30ec955474f51b99ce42fc62f3b
https://git.kernel.org/stable/c/2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4