CVE-2025-12890 — Bluetooth: peripheral: Invalid handling of malformed connection request

CVE-2025-12890

Bluetooth: peripheral: Invalid handling of malformed connection request PUBLISHED

Description (CNA)

Improper handling of malformed Connection Request with the interval set to be 1 (which supposed to be illegal) and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * before 4.2.0

CWE

CWE-703

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8hrf-pfww-83v9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.