Bluetooth Vulnerability in Linux Kernel Affects Basic Audio Announcement Service

CVE-2023-7356

What is CVE-2023-7356?

A vulnerability has been identified within the Linux kernel's Bluetooth functionality, specifically in how it handles service data associated with the Basic Audio Announcement Service UUID. The issue arises during the copying of the content from a Periodic Advertisement Report to the BASE (Bluetooth Advertising Set) only when the service UUID matches that of the Basic Audio Announcement Service. This could potentially lead to improper handling or exposure of service data while interacting within Bluetooth environments. The Linux community has provided patches to mitigate this risk, and users are encouraged to update their systems to maintain security.

References