CVE-2025-38303

MEDIUM

Linux Kernel 5.16-6.12.34, 6.13-6.15.3 - Denial of Service via EIR Data Buffer Overflow

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER without checking if that would fit.

References (4)

Core 4

Core References

https://git.kernel.org/stable/c/2d4588f55cc10fc228f3b46469dbfb3f0a8b13c8

Patch

https://git.kernel.org/stable/c/2af40d795d3fb0ee5c074b7ac56ab22402aa6e4f

Patch

https://git.kernel.org/stable/c/b9db0c27e73b7c8a19384a44af527edfda74ff3d

Patch

https://git.kernel.org/stable/c/47c03902269aff377f959dc3fd94a9733aa31d6e

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 4.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (16)

linux/Kernel 5.16.0 - 6.1.168linux

linux/Kernel 5.16.0 - 6.12.34linux

linux/Kernel 6.13.0 - 6.15.3linux

linux/Kernel 6.2.0 - 6.12.34linux

Linux/Linux < 5.16

Linux/Linux 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 - 2af40d795d3fb0ee5c074b7ac56ab22402aa6e4f

Linux/Linux 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 - 2d4588f55cc10fc228f3b46469dbfb3f0a8b13c8

Linux/Linux 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 - 47c03902269aff377f959dc3fd94a9733aa31d6e

Linux/Linux 01ce70b0a274bd76a5a311fb90d4d446d9bdfea1 - b9db0c27e73b7c8a19384a44af527edfda74ff3d

Linux/Linux 5.16

... and 6 more

Published Jul 10, 2025

Tracked Since Feb 18, 2026