Red Hat: CVE-2023-28866: kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (Multiple Advisories)

Red Hat: CVE-2023-28866: kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (Multiple Advisories)

Severity

5

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

03/27/2023

Created

12/06/2024

Added

12/05/2024

Modified

12/05/2024

Description

In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2023-28866
• RHSA-2024:2394