CVE-2023-7356

A flaw was found in the Linux kernel's Bluetooth subsystem. An adjacent attacker within Bluetooth range could exploit this flaw by broadcasting specially crafted Bluetooth Low Energy (LE) periodic advertisement packets. Because incoming advertisement data was copied into internal socket buffers without properly validating data length and service types, an attacker could trigger a buffer overflow. This vulnerability can lead to a system crash, resulting in a denial of service (DoS), or potentially allow arbitrary code execution.

This vulnerability is rated as Important because an unauthenticated adjacent attacker within wireless transmission range can trigger a kernel buffer overflow without user interaction, potentially causing a complete system denial of service or arbitrary kernel execution. In typical Red Hat Enterprise Linux server and cloud deployments, Bluetooth adapters are absent or disabled by default, which substantially curtails exposure. However, systems operating active Bluetooth Low Energy interfaces and processing periodic advertisement reports are directly vulnerable to nearby malicious broadcasts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.