CVE-2021-47620: Bluetooth: refactor malicious adv data check
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: refactor malicious adv data check
Check for out-of-bound read was being performed at the end of while numreports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47620?
CVE-2021-47620 has a moderate severity level due to the potential for out-of-bounds read vulnerabilities in the Linux kernel's Bluetooth implementation.
How do I fix CVE-2021-47620?
To fix CVE-2021-47620, update your Linux kernel to a version that is higher than 4.4.302 or falls outside the affected version ranges.
Which Linux kernel versions are affected by CVE-2021-47620?
CVE-2021-47620 affects Linux kernel versions from 4.4.302 up to 5.16.5, including several versions between this range.
Is CVE-2021-47620 exploitable?
CVE-2021-47620 is potentially exploitable in scenarios where Bluetooth services are maliciously manipulated to cause an out-of-bounds read.
What components of the Linux kernel are impacted by CVE-2021-47620?
CVE-2021-47620 primarily impacts the Bluetooth subsystem of the Linux kernel.