Debian/linux: medium 5.3
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
Action: Upgrade linux to 6.1.20-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.20-2 | - |
Fixed versions
| 6.1.20-2 |
Sources
published · modified · JSON