PT-2025-29035 · Linux+6 · Linux Kernel+6

Published 2025-05-20 · Updated 2026-03-06 · CVE-2025-38315

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A stack buffer overflow issue was identified in the Bluetooth btintel driver. The vulnerability occurs when the EFI variable size exceeds the size of the btintel dsbr structure. The fix involves verifying the size of the dsbr structure against the EFI variable size, preventing a buffer overflow if a mismatch is detected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Recursion

Stack Overflow

Weakness Enumeration

CWE-674

CWE-121

Related Identifiers

BDU:2025-09063

CVE-2025-38315

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

Btintel

References · 1640

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38315.json · Exploit
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38291 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7770-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38140 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38287 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7769-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38071 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38135 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09063 · Security Note
• https://ubuntu.com/security/CVE-2025-38064 · Vendor Advisory