CVE-2025-38303

CVE-2025-38303

High · published July 10, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix possible crashes on eir_create_adv_data

eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER

without checking if that would fit.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Published
2025-07-10T12:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.12.346.12.34
linux/linux_kernel≥ 6.13, < 6.15.36.15.3
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/2af40d795d3fb0ee5c074b7ac56ab22402aa6e4f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2d4588f55cc10fc228f3b46469dbfb3f0a8b13c8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/47c03902269aff377f959dc3fd94a9733aa31d6e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b9db0c27e73b7c8a19384a44af527edfda74ff3d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e98ce4b70beab73563d82bd21821024140e6da06 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 10 JUL 07:42Z
    Bluetooth: eir: Fix possible crashes on eir_create_adv_data
    cvelistv5