Riskcovery

CVE-2023-7356

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

State
Published
Severity
8.8 High
Published
Oct 21, 2026
Updated
Oct 26, 2026
Reserved
Oct 21, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e4cfffb5ebc80820f46cf16a6fa5be1b436bdf2d to before ba25efe15e8fd909884e113a86c6ccd07d88256eAffected
  • 9c0826310bfb784c9bac7d1d9454e304185446c5 to before 927ef409f713929dea2b9a5ed5bb65e712be0050Affected
  • 9c0826310bfb784c9bac7d1d9454e304185446c5 to before f4da3ee15de9944482382181329bb6d7335ca003Affected
  • 6.1.159 to before 6.1.178Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.