CVE-2022-50233 — Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

CVE-2022-50233

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Affected (CNA)

Vendor / product	Versions
Linux / Linux	affected 4c3dbb2c312c9fafbac30d98c523b8b1f3455d78 before dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80
Linux / Linux	affected 4.14; unaffected 0 before 4.14; unaffected 6.0 through *

CWE

No CWE identifiers supplied.

References

https://git.kernel.org/stable/c/dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.