CVE-2025-38315: Bluetooth: btintel: Check dsbr size from EFI variable
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: Check dsbr size from EFI variable
Since the size of struct btinteldsbr is already known, we can just start there instead of querying the EFI variable size. If the final result doesn't match what we expect also fail. This fixes a stack buffer overflow when the EFI variable is larger than struct btinteldsbr.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.35-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.34 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38315?
CVE-2025-38315 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-38315?
To rectify CVE-2025-38315, users should update their Linux kernel to the latest patched version where the vulnerability has been resolved.
What systems are affected by CVE-2025-38315?
CVE-2025-38315 impacts various distributions of the Linux kernel that utilize the Bluetooth btintel driver.
What are the potential impacts of CVE-2025-38315?
The potential impact of CVE-2025-38315 may include unauthorized access to system resources or instability in Bluetooth functionality.
Is there a known exploit for CVE-2025-38315?
As of now, there are no publicly known exploits for CVE-2025-38315, but it is always advisable to apply security updates promptly.