CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel_diagnostics() accesses tlv->val[0] without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the received frame. Fix by validating the length before access. A flaw was found in the Bluetooth `btintel` driver of the Linux kernel. The `btintel_diagnostics()` function fails to validate the length of a diagnostics Vendor Specific Event (VSE) before accessing its data. This oversight allows an attacker to potentially read data beyond the intended memory boundary, which could lead to information disclosure.
Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…