CVE-2022-50233

Source
https://cve.org/CVERecord?id=CVE-2022-50233
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50233.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50233
Downstream
Related
Published
2025-08-09T14:30:51.639Z
Modified
2026-03-20T12:05:34.223028Z
Summary
Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{devname,shortname}

Both devname and shortname are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50233.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4c3dbb2c312c9fafbac30d98c523b8b1f3455d78
Fixed
dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50233.json"