CVE-2023-28866

CVE	CVE-2023-28866
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-03-27 01:15:00 UTC
Updated	2023-11-07 04:10:00 UTC
Description	In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.

Problem Types: CWE-125

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Reference	Source	Link	Tags
[PATCH] Bluetooth: HCI: Fix global-out-of-bounds - Sungwoo Kim		lore.kernel.org
[PATCH] Bluetooth: HCI: Fix global-out-of-bounds - Sungwoo Kim	MISC	lore.kernel.org
pull-request: bluetooth 2023-03-22 - Patchwork	MISC	patchwork.kernel.org
kernel/git/bluetooth/bluetooth-next.git - Bluetooth kernel development tree	MISC	git.kernel.org
pull-request: bluetooth 2023-03-22 - Patchwork		patchwork.kernel.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

183548 Debian Security Update for linux (CVE-2023-28866)
199298 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6033-1)
199422 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6175-1)
199437 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6186-1)
907125 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (25911-1)
907186 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (25933-1)