logo_clicknbuy.png

CVE-2022-50233 – Linux Kernel Bluetooth eir strlen Vulnerability

The following table lists the changes that have been made to the
CVE-2022-50233 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 09, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

    Both dev_name and short_name are not guaranteed to be NULL terminated so
    this instead use strnlen and then attempt to determine if the resulting
    string needs to be truncated or not.
    Added Reference https://git.kernel.org/stable/c/dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80
Share the Post:

Related Posts