CVE-2023-7356

LOW

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://git.kernel.org/stable/c/927ef409f713929dea2b9a5ed5bb65e712be0050
https://git.kernel.org/stable/c/ba25efe15e8fd909884e113a86c6ccd07d88256e
https://git.kernel.org/stable/c/f4da3ee15de9944482382181329bb6d7335ca003

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Brad Spengler@spendergrsec1d
Someone requested a CVE for a 2023 Bluetooth commit that was suddenly backported to 6.6 3 months ago: https://lore.kernel.org/linux-cve-announce/2026102146-CVE-2023-7356-e5bb@gregkh/T/#u, presumably from: https://lore.kernel.org/stable/20260702144207.320421-1-mendozayt13@gmail.com/
00030646
7.1K followersView on X

Explore more

Back to dashboard