|
Vulnerabilities
< Back

CVE-2025-40294

Updated on 08 Dec 2025

Severity

Awaiting Analysis

Details

Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()

In the parse_adv_monitor_pattern() function, the value of the ’length’ variable is currently limited to HCI_MAX_EXT_AD_LENGTH(251). The size of the ‘value’ array in the mgmt_adv_pattern structure is 31. If the value of ‘pattern[i].length’ is set in the user space and exceeds 31, the ‘patterns[i].value’ array can be accessed out of bound when copied.

Increasing the size of the ‘value’ array in the ‘mgmt_adv_pattern’ structure will break the userspace. Considering this, and to avoid OOB access revert the limits for ‘offset’ and ’length’ back to the value of HCI_MAX_AD_LENGTH.

Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Details

Affected product:
AlmaLinux 9.2 ESU , TuxCare 9.6 ESU
Affected packages:
kernel @ 5.14.0 (+1 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 10 Released
22 kernels
  • 6.12.0-55.27.1.el10_0
  • 6.12.0-55.28.1.el10_0
  • 6.12.0-55.29.1.el10_0
  • 6.12.0-55.30.1.el10_0
  • 6.12.0-55.31.1.el10_0
  • 6.12.0-55.32.1.el10_0
  • 6.12.0-55.33.1.el10_0
  • 6.12.0-55.34.1.el10_0
  • 6.12.0-55.37.1.el10_0
  • 6.12.0-55.38.1.el10_0
  • 6.12.0-55.39.1.el10_0
  • 6.12.0-55.40.1.el10_0
  • 6.12.0-55.42.1.el10_0
  • 6.12.0-55.43.1.el10_0
  • 6.12.0-124.8.1.el10_1
  • 6.12.0-124.13.1.el10_1
  • 6.12.0-124.16.1.el10_1
  • 6.12.0-124.20.1.el10_1
  • 6.12.0-124.21.1.el10_1
  • 6.12.0-124.27.1.el10_1
  • 6.12.0-124.28.1.el10_1
  • 6.12.0-124.29.1.el10_1
AlmaLinux 9 Released
67 kernels
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-503.11.1.el9_5
  • 5.14.0-503.14.1.el9_5
  • 5.14.0-503.15.1.el9_5
  • 5.14.0-503.16.1.el9_5
  • 5.14.0-503.19.1.el9_5
  • 5.14.0-503.21.1.el9_5
  • 5.14.0-503.22.1.el9_5
  • 5.14.0-503.23.2.el9_5
  • 5.14.0-503.26.1.el9_5
  • 5.14.0-503.23.1.el9_5
  • 5.14.0-503.31.1.el9_5
  • 5.14.0-503.34.1.el9_5
  • 5.14.0-503.29.1.el9_5
  • 5.14.0-503.35.1.el9_5
  • 5.14.0-503.33.1.el9_5
  • 5.14.0-503.38.1.el9_5
  • 5.14.0-503.40.1.el9_5
  • 5.14.0-570.12.1.el9_6
  • 5.14.0-570.16.1.el9_6
  • 5.14.0-570.17.1.el9_6
  • 5.14.0-570.18.1.el9_6
  • 5.14.0-570.19.1.el9_6
  • 5.14.0-570.21.1.el9_6
  • 5.14.0-570.22.1.el9_6
  • 5.14.0-570.23.1.el9_6
  • 5.14.0-570.24.1.el9_6
  • 5.14.0-570.25.1.el9_6
  • 5.14.0-570.26.1.el9_6
  • 5.14.0-570.28.1.el9_6
  • 5.14.0-570.30.1.el9_6
  • 5.14.0-570.32.1.el9_6
  • 5.14.0-570.33.2.el9_6
  • 5.14.0-570.35.1.el9_6
  • 5.14.0-570.37.1.el9_6
  • 5.14.0-570.39.1.el9_6
  • 5.14.0-570.41.1.el9_6
  • 5.14.0-570.42.2.el9_6
  • 5.14.0-570.44.1.el9_6
  • 5.14.0-570.46.1.el9_6
  • 5.14.0-570.49.1.el9_6
  • 5.14.0-570.51.1.el9_6
  • 5.14.0-570.52.1.el9_6
  • 5.14.0-570.55.1.el9_6
  • 5.14.0-570.58.1.el9_6
  • 5.14.0-570.60.1.el9_6
  • 5.14.0-570.62.1.el9_6
  • 5.14.0-611.5.1.el9_7
  • 5.14.0-611.9.1.el9_7
  • 5.14.0-611.11.1.el9_7
  • 5.14.0-611.13.1.el9_7
  • 5.14.0-611.16.1.el9_7
  • 5.14.0-611.20.1.el9_7
  • 5.14.0-611.24.1.el9_7
AlmaLinux 9.6 ESU Planned —
Debian 12 Released
21 kernels
  • 6.1.85-1
  • 6.1.90-1
  • 6.1.94-1
  • 6.1.99-1
  • 6.1.106-3
  • 6.1.112-1
  • 6.1.115-1
  • 6.1.119-1
  • 6.1.123-1
  • 6.1.128-1
  • 6.1.124-1
  • 6.1.129-1
  • 6.1.133-1
  • 6.1.135-1
  • 6.1.137-1
  • 6.1.140-1
  • 6.1.139-1
  • 6.1.147-1
  • 6.1.148-1
  • 6.1.153-1
  • 6.1.158-1
Debian 13 Will Not Fix —
Oracle Linux 10 Released
23 kernels
  • 6.12.0-55.27.1.0.1.el10_0
  • 6.12.0-55.28.1.0.1.el10_0
  • 6.12.0-55.29.1.0.1.el10_0
  • 6.12.0-55.30.1.0.1.el10_0
  • 6.12.0-55.31.1.0.1.el10_0
  • 6.12.0-55.32.1.0.1.el10_0
  • 6.12.0-55.33.1.0.1.el10_0
  • 6.12.0-55.34.1.0.1.el10_0
  • 6.12.0-55.37.1.0.1.el10_0
  • 6.12.0-55.38.1.0.1.el10_0
  • 6.12.0-55.39.1.0.1.el10_0
  • 6.12.0-55.40.1.0.1.el10_0
  • 6.12.0-55.41.1.0.1.el10_0
  • 6.12.0-55.42.1.0.1.el10_0
  • 6.12.0-55.43.1.0.1.el10_0
  • 6.12.0-124.8.1.el10_1
  • 6.12.0-124.13.1.el10_1
  • 6.12.0-124.16.1.el10_1
  • 6.12.0-124.20.1.el10_1
  • 6.12.0-124.21.1.el10_1
  • 6.12.0-124.27.1.el10_1
  • 6.12.0-124.28.1.el10_1
  • 6.12.0-124.29.1.el10_1
Oracle Linux 9 Released
69 kernels
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-503.11.1.el9_5
  • 5.14.0-503.14.1.el9_5
  • 5.14.0-503.15.1.el9_5
  • 5.14.0-503.16.1.el9_5
  • 5.14.0-503.19.1.el9_5
  • 5.14.0-503.21.1.el9_5
  • 5.14.0-503.22.1.el9_5
  • 5.14.0-503.23.1.el9_5
  • 5.14.0-503.23.2.el9_5
  • 5.14.0-503.26.1.el9_5
  • 5.14.0-503.31.1.el9_5
  • 5.14.0-503.29.1.el9_5
  • 5.14.0-503.33.1.el9_5
  • 5.14.0-503.34.1.el9_5
  • 5.14.0-503.35.1.el9_5
  • 5.14.0-503.38.1.el9_5
  • 5.14.0-503.40.1.el9_5
  • 5.14.0-570.12.1.0.1.el9_6
  • 5.14.0-570.16.1.0.1.el9_6
  • 5.14.0-570.17.1.0.1.el9_6
  • 5.14.0-570.18.1.0.1.el9_6
  • 5.14.0-570.19.1.0.1.el9_6
  • 5.14.0-570.21.1.0.1.el9_6
  • 5.14.0-570.22.1.0.1.el9_6
  • 5.14.0-570.23.1.0.1.el9_6
  • 5.14.0-570.24.1.0.1.el9_6
  • 5.14.0-570.25.1.0.1.el9_6
  • 5.14.0-570.26.1.0.1.el9_6
  • 5.14.0-570.28.1.0.1.el9_6
  • 5.14.0-570.30.1.0.1.el9_6
  • 5.14.0-570.32.1.0.1.el9_6
  • 5.14.0-570.33.2.0.1.el9_6
  • 5.14.0-570.35.1.0.1.el9_6
  • 5.14.0-570.37.1.0.1.el9_6
  • 5.14.0-570.39.1.0.1.el9_6
  • 5.14.0-570.41.1.0.1.el9_6
  • 5.14.0-570.42.2.0.1.el9_6
  • 5.14.0-570.44.1.0.1.el9_6
  • 5.14.0-570.46.1.0.1.el9_6
  • 5.14.0-570.49.1.0.1.el9_6
  • 5.14.0-570.51.1.0.1.el9_6
  • 5.14.0-570.52.1.0.1.el9_6
  • 5.14.0-570.55.1.0.1.el9_6
  • 5.14.0-570.58.1.0.1.el9_6
  • 5.14.0-570.60.1.0.1.el9_6
  • 5.14.0-570.62.1.0.1.el9_6
  • 5.14.0-611.5.1.el9_7
  • 5.14.0-611.9.1.el9_7
  • 5.14.0-611.7.1.el9_7
  • 5.14.0-611.8.1.el9_7
  • 5.14.0-611.11.1.el9_7
  • 5.14.0-611.13.1.el9_7
  • 5.14.0-611.16.1.el9_7
  • 5.14.0-611.20.1.el9_7
  • 5.14.0-611.24.1.el9_7
RHEL 10 Released
25 kernels
  • 6.12.0-55.27.1.el10_0
  • 6.12.0-55.28.1.el10_0
  • 6.12.0-55.29.1.el10_0
  • 6.12.0-55.30.1.el10_0
  • 6.12.0-55.31.1.el10_0
  • 6.12.0-55.32.1.el10_0
  • 6.12.0-55.33.1.el10_0
  • 6.12.0-55.34.1.el10_0
  • 6.12.0-55.37.1.el10_0
  • 6.12.0-55.38.1.el10_0
  • 6.12.0-55.39.1.el10_0
  • 6.12.0-55.40.1.el10_0
  • 6.12.0-55.41.1.el10_0
  • 6.12.0-55.42.1.el10_0
  • 6.12.0-55.43.1.el10_0
  • 6.12.0-124.9.1.el10_1
  • 6.12.0-124.8.1.el10_1
  • 6.12.0-124.11.1.el10_1
  • 6.12.0-124.13.1.el10_1
  • 6.12.0-124.16.1.el10_1
  • 6.12.0-124.20.1.el10_1
  • 6.12.0-124.21.1.el10_1
  • 6.12.0-124.27.1.el10_1
  • 6.12.0-124.28.1.el10_1
  • 6.12.0-124.29.1.el10_1
RHEL 9 Released
69 kernels
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-503.11.1.el9_5
  • 5.14.0-503.14.1.el9_5
  • 5.14.0-503.15.1.el9_5
  • 5.14.0-503.16.1.el9_5
  • 5.14.0-503.19.1.el9_5
  • 5.14.0-503.21.1.el9_5
  • 5.14.0-503.22.1.el9_5
  • 5.14.0-503.23.1.el9_5
  • 5.14.0-503.23.2.el9_5
  • 5.14.0-503.26.1.el9_5
  • 5.14.0-503.29.1.el9_5
  • 5.14.0-503.31.1.el9_5
  • 5.14.0-503.33.1.el9_5
  • 5.14.0-503.34.1.el9_5
  • 5.14.0-503.35.1.el9_5
  • 5.14.0-503.38.1.el9_5
  • 5.14.0-503.40.1.el9_5
  • 5.14.0-570.12.1.el9_6
  • 5.14.0-570.16.1.el9_6
  • 5.14.0-570.17.1.el9_6
  • 5.14.0-570.18.1.el9_6
  • 5.14.0-570.19.1.el9_6
  • 5.14.0-570.21.1.el9_6
  • 5.14.0-570.22.1.el9_6
  • 5.14.0-570.23.1.el9_6
  • 5.14.0-570.24.1.el9_6
  • 5.14.0-570.25.1.el9_6
  • 5.14.0-570.26.1.el9_6
  • 5.14.0-570.28.1.el9_6
  • 5.14.0-570.30.1.el9_6
  • 5.14.0-570.32.1.el9_6
  • 5.14.0-570.33.2.el9_6
  • 5.14.0-570.35.1.el9_6
  • 5.14.0-570.37.1.el9_6
  • 5.14.0-570.39.1.el9_6
  • 5.14.0-570.41.1.el9_6
  • 5.14.0-570.42.2.el9_6
  • 5.14.0-570.44.1.el9_6
  • 5.14.0-570.46.1.el9_6
  • 5.14.0-570.49.1.el9_6
  • 5.14.0-570.51.1.el9_6
  • 5.14.0-570.52.1.el9_6
  • 5.14.0-570.55.1.el9_6
  • 5.14.0-570.58.1.el9_6
  • 5.14.0-570.60.1.el9_6
  • 5.14.0-570.62.1.el9_6
  • 5.14.0-611.5.1.el9_7
  • 5.14.0-611.7.1.el9_7
  • 5.14.0-611.8.1.el9_7
  • 5.14.0-611.9.1.el9_7
  • 5.14.0-611.11.1.el9_7
  • 5.14.0-611.13.1.el9_7
  • 5.14.0-611.16.1.el9_7
  • 5.14.0-611.20.1.el9_7
  • 5.14.0-611.24.1.el9_7
Rocky Linux 10 Released
17 kernels
  • 6.12.0-55.27.1.el10_0
  • 6.12.0-55.29.1.el10_0
  • 6.12.0-55.30.1.el10_0
  • 6.12.0-55.32.1.el10_0
  • 6.12.0-55.34.1.el10_0
  • 6.12.0-55.37.1.el10_0
  • 6.12.0-55.39.1.el10_0
  • 6.12.0-55.40.1.el10_0
  • 6.12.0-55.41.1.el10_0
  • 6.12.0-124.8.1.el10_1
  • 6.12.0-124.13.1.el10_1
  • 6.12.0-124.16.1.el10_1
  • 6.12.0-124.20.1.el10_1
  • 6.12.0-124.21.1.el10_1
  • 6.12.0-124.27.1.el10_1
  • 6.12.0-124.28.1.el10_1
  • 6.12.0-124.29.1.el10_1
Rocky Linux 9 Released
56 kernels
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.20.1.el9_4.0.1
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-503.14.1.el9_5
  • 5.14.0-503.15.1.el9_5
  • 5.14.0-503.16.1.el9_5
  • 5.14.0-503.19.1.el9_5
  • 5.14.0-503.21.1.el9_5
  • 5.14.0-503.22.1.el9_5
  • 5.14.0-503.23.2.el9_5
  • 5.14.0-503.26.1.el9_5
  • 5.14.0-503.23.1.el9_5
  • 5.14.0-503.31.1.el9_5
  • 5.14.0-503.34.1.el9_5
  • 5.14.0-503.29.1.el9_5
  • 5.14.0-503.35.1.el9_5
  • 5.14.0-503.33.1.el9_5
  • 5.14.0-503.38.1.el9_5
  • 5.14.0-503.40.1.el9_5
  • 5.14.0-570.18.1.el9_6
  • 5.14.0-570.19.1.el9_6
  • 5.14.0-570.21.1.el9_6
  • 5.14.0-570.22.1.el9_6
  • 5.14.0-570.23.1.el9_6
  • 5.14.0-570.25.1.el9_6
  • 5.14.0-570.26.1.el9_6
  • 5.14.0-570.28.1.el9_6
  • 5.14.0-570.30.1.el9_6
  • 5.14.0-570.32.1.el9_6
  • 5.14.0-570.33.2.el9_6
  • 5.14.0-570.37.1.el9_6
  • 5.14.0-570.39.1.el9_6
  • 5.14.0-570.42.2.el9_6
  • 5.14.0-570.49.1.el9_6
  • 5.14.0-570.52.1.el9_6
  • 5.14.0-570.55.1.el9_6
  • 5.14.0-570.58.1.el9_6
  • 5.14.0-611.5.1.el9_7
  • 5.14.0-611.9.1.el9_7
  • 5.14.0-611.11.1.el9_7
  • 5.14.0-611.13.1.el9_7
  • 5.14.0-611.16.1.el9_7
  • 5.14.0-611.20.1.el9_7
  • 5.14.0-611.24.1.el9_7
Ubuntu 24.04 Planned —
Ubuntu 24.04 AWS Planned —