Threats tagged 'ghsa-xv96-c36m-qhm7'

A vulnerability in the Linux kernel's Bluetooth RFCOMM implementation was resolved. The function rfcomm_recv_frame() failed to validate the length of the skb buffer before dereferencing its data, leading to out-of-bounds reads of uninitialized memory and potential underflow conditions. This flaw could cause memory safety issues when processing truncated or zero-length frames. The issue was fixed by adding proper length validation to reject frames smaller than the minimum required size.