CVE-2025-38315

Bluetooth: btintel: Check dsbr size from EFI variable

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: Check dsbr size from EFI variable

Since the size of struct btintel_dsbr is already known, we can just

start there instead of querying the EFI variable size. If the final

result doesn't match what we expect also fail. This fixes a stack buffer

overflow when the EFI variable is larger than struct btintel_dsbr.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Published
2025-07-10T07:42Z
EPSS history
Timeline
  • 10 JUL 07:42Z
    Bluetooth: btintel: Check dsbr size from EFI variable
    cvelistv5