Linux Kernel Bluetooth EIR Handling Vulnerability Leading to Potential Crashes

A vulnerability in the Linux kernel's Bluetooth implementation has been addressed, which could lead to crashes. The issue arose in the Enhanced Inquiry Response (EIR) data handling, specifically within the 'eir_create_adv_data' function. This function may have tried to include EIR_FLAGS and EIR_TX_POWER attributes without verifying whether there was sufficient space to accommodate them.

Impact

The vulnerability could cause a crash by creating a buffer overflow situation, where the program tries to write more data than a buffer can hold, potentially leading to memory corruption.