CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow and turn the copy into an oversized read and write during Bluetooth setup. The existing patch_offset + patch_length check can also wrap on 32-bit architectures. Validate the patch length and range without arithmetic overflow before allocating or copying the patch.
Засегнати продукти
- Linux Linux: db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди 39e01b4addfbbe177567d6ed1dfb81f9cccb19e6; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди bda3c598ade6ea03884074b91e31608326684921; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди a4cb830e0b55ac76c849fd7840afb251f4c028fa; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди 68c5a2a19987c035eb129e627e579adafb04f637; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди 83534891c058ed71e251135072640911670869aa; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди 6744ab60dfac55d1df5733960aad5be300984301; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди f1ca750c0510bdbb504bf084d2f196ef2af92ea6; db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 преди 609c5b04a28dc1b0f3af6a7bc93055135b2d2059
- Linux Linux: 4.2; преди 4.2; 5.10.261 до 5.10.*; 5.15.212 до 5.15.*; 6.1.178 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък
Вид слабост
История
- 15 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-68479
- https://nvd.nist.gov/vuln/detail/CVE-2026-68479
- https://git.kernel.org/stable/c/39e01b4addfbbe177567d6ed1dfb81f9cccb19e6
- https://git.kernel.org/stable/c/bda3c598ade6ea03884074b91e31608326684921
- https://git.kernel.org/stable/c/a4cb830e0b55ac76c849fd7840afb251f4c028fa
- https://git.kernel.org/stable/c/68c5a2a19987c035eb129e627e579adafb04f637
- https://git.kernel.org/stable/c/83534891c058ed71e251135072640911670869aa
- https://git.kernel.org/stable/c/6744ab60dfac55d1df5733960aad5be300984301
- https://git.kernel.org/stable/c/f1ca750c0510bdbb504bf084d2f196ef2af92ea6
- https://git.kernel.org/stable/c/609c5b04a28dc1b0f3af6a7bc93055135b2d2059