CVE-2022-50233

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50233
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.
CVSS

No CVSS.

References
Link Resource
https://git.kernel.org/stable/c/dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80
Configurations

No configuration.

History

11 Aug 2025, 18:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: eir: Corrección del uso de strlen con hdev->{dev_name,short_name} No se garantiza que dev_name y short_name terminen en NULL, por lo que en su lugar se utiliza strnlen y luego se intenta determinar si la cadena resultante debe truncarse o no.

09 Aug 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-09 15:15

Updated : 2025-08-11 18:32

NVD link : CVE-2022-50233

Mitre link : CVE-2022-50233

CVE.ORG link : CVE-2022-50233

JSON object : View

Products Affected

No product.

CWE

No CWE.