CVE-2023-28866

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28866
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.

5.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a Issue Tracking
https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a Issue Tracking
https://lore.kernel.org/lkml/20230321015018.1759683-1-iam%40sung-woo.kim/
https://lore.kernel.org/lkml/20230321015018.1759683-1-iam%40sung-woo.kim/
https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz%40gmail.com
https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz%40gmail.com
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

05 May 2025, 16:15

Type Values Removed Values Added
References (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a - Issue Tracking () https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a - Issue Tracking

07 Nov 2023, 04:10

Type Values Removed Values Added
References
  • {'url': 'https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz@gmail.com', 'name': 'https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz@gmail.com', 'tags': ['Mailing List', 'Patch'], 'refsource': 'MISC'}
  • {'url': 'https://lore.kernel.org/lkml/20230321015018.1759683-1-iam@sung-woo.kim/', 'name': 'https://lore.kernel.org/lkml/20230321015018.1759683-1-iam@sung-woo.kim/', 'tags': ['Mailing List', 'Patch'], 'refsource': 'MISC'}
  • () https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz%40gmail.com -
  • () https://lore.kernel.org/lkml/20230321015018.1759683-1-iam%40sung-woo.kim/ -

03 Apr 2023, 13:59

Type Values Removed Values Added
References (MISC) https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz@gmail.com - (MISC) https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz@gmail.com - Mailing List, Patch
References (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a - (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a - Issue Tracking
References (MISC) https://lore.kernel.org/lkml/20230321015018.1759683-1-iam@sung-woo.kim/ - (MISC) https://lore.kernel.org/lkml/20230321015018.1759683-1-iam@sung-woo.kim/ - Mailing List, Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
CWE CWE-125
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Information

Published : 2023-03-27 01:15

Updated : 2025-05-05 16:15

NVD link : CVE-2023-28866

Mitre link : CVE-2023-28866

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read