CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the Bluetooth btintel component, where the function btintel_diagnostics() fails to validate the length of the diagnostics TLV before accessing its data. This oversight could lead to potential out-of-bounds reads, which may expose sensitive information or cause instability in the system. Organizations using Linux-based systems with Bluetooth capabilities should prioritize applying the patch to mitigate any risks associated with this vulnerability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel_diagnostics() accesses tlv->val[0] without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the received frame. Fix by validating the length before access.