PT-2025-49427 · Linux+4 · Linux Kernel+4
Published
2025-12-08
·
Updated
2026-05-07
·
CVE-2025-40294
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s Bluetooth implementation within the
parse adv monitor pattern() function. The issue involves a potential out-of-bounds access when copying data into the patterns[i].value array within the mgmt adv pattern structure. Specifically, if the pattern[i].length value, set in user space, exceeds 31, an out-of-bounds write can occur. The vulnerability is related to the handling of advertising monitor patterns and the size limits applied to the offset and length variables. The issue was discovered by InfoTeCS on behalf of Linux Verification Center.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu