Out-of-bounds Read in Linux

CVE-2021-47620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (12.8th percentile) — read the EPSS interpretation.