Threats tagged 'ghsa-mp66-rx49-f278'

A vulnerability in the Linux kernel Bluetooth subsystem was resolved involving improper validation of skb length when handling unknown command complete opcodes. The function hci_cmd_complete_evt() assumed the presence of return status data without verifying skb length, potentially leading to use of uninitialized memory. The fix involves checking skb length before accessing skb data to prevent this issue.