Linux Kernel Bluetooth HCI Event Wake Reason Storage Vulnerability

A vulnerability in the Linux kernel's Bluetooth implementation allows short HCI event frames to bypass initial bounds checks, potentially leading to unexpected behavior. This issue arises because the wake reason storage function is called too early in the event handling process, before validating the event's payload length. The vulnerability affects the Linux kernel's stable releases.

Impact

The vulnerability could cause improper handling of Bluetooth HCI events, potentially leading to issues with event processing or device communication.

Remediation

Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.