CVE-2022-50233

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

This vulnerability is rated as Moderate severity for Red Hat because exploitation requires a local user to interact with the Bluetooth subsystem on a system with active Bluetooth hardware or virtual controllers. In typical enterprise server deployments, Bluetooth interfaces are either unconfigured or absent, significantly limiting exposure. A local authenticated attacker could trigger an out-of-bounds read, potentially leading to a kernel crash or unauthorized disclosure of kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.