In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: eir: Fix using strlen with hdev->{devname,shortname}
Both devname and shortname are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80",
"target": {
"file": "net/bluetooth/eir.c"
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50233-78530154",
"signature_type": "Line",
"digest": {
"line_hashes": [
"259586823150180560088682897429552224796",
"217732897059802294689321888218814347745",
"135707986452649680937963391610889433909",
"66327685860077491775182332693521923617",
"137303865067575976829842452860419832632",
"97002085897307751328233271335909591097",
"257661346504600189850661921948782276824",
"114044247592243543317573504662969627330",
"193197134446609996253995759128828658468",
"103290570225193386576748288575925282800",
"3385647997272105987693463210464279395",
"216372509657766319408748591996892209678",
"249041614171476742504241582685250533274",
"302542695533002493423183487608140469655",
"287942208215778369391312227328999927284",
"104896939581155256945241775275762907172",
"115893258097209877178868195919494717382",
"268897393055239970994387502197113897898",
"251759462949326147045936168568804456590",
"10587497301506004314472594022940365545",
"71670593816953825347582416585009832930",
"64766697478789278527610593533517451801",
"130610201585132445772329893639391126525",
"250590650815926431569294849448820899574",
"85584333015473083317600236274146731442"
],
"threshold": 0.9
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80",
"target": {
"function": "eir_append_local_name",
"file": "net/bluetooth/eir.c"
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50233-904a7951",
"signature_type": "Function",
"digest": {
"function_hash": "313610186663873716209104407766597863562",
"length": 745.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80",
"target": {
"function": "append_eir_data_to_buf",
"file": "net/bluetooth/mgmt.c"
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50233-a427f266",
"signature_type": "Function",
"digest": {
"function_hash": "132158847661577801020575972787174765003",
"length": 575.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80",
"target": {
"function": "eir_create",
"file": "net/bluetooth/eir.c"
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50233-b4421f92",
"signature_type": "Function",
"digest": {
"function_hash": "175433050832008359260497350188386202499",
"length": 993.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50233-f7e1b373",
"signature_type": "Line",
"digest": {
"line_hashes": [
"72606123562362159035379512717382455352",
"136081719015342077408883252755943267735",
"100411044754396058065107130046040528179",
"80013863380556988941286845919521525691",
"286835386344619572433151935206616256317",
"269026662833798872206921231555007797813",
"135431099625826134156427893337365577701"
],
"threshold": 0.9
}
}
]