Linux Kernel Bluetooth Name Handling Vulnerability

A vulnerability in the Linux kernel's Bluetooth implementation has been addressed. The issue arose because the device name and short name were not guaranteed to be null-terminated, leading to potential string handling errors. The vulnerability has been fixed by replacing the use of 'strlen' with 'strnlen' to safely determine the length of these strings, followed by a check to see if the strings needed to be truncated.

Impact

The vulnerability could have led to improper handling of Bluetooth device names, potentially causing memory corruption or other unintended behavior in Bluetooth communication.