Threats tagged 'ghsa-cc6q-p4xg-qp8m'

A vulnerability in the Linux kernel's Bluetooth btrtl component was resolved. The issue involved leaking an uninitialized return code when parsing firmware format v2, specifically when the key_id from the chip is zero and security headers are ignored. The flaw caused the function rtlbt_parse_firmware_v2() to leak return codes from previous sections due to improper control flow in a switch statement. This has been fixed by correctly skipping the loop iteration with a continue statement.