CVE-2023-7356

HighCVSS 8.8/10Last modified Oct 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e4cfffb5ebc80820f46cf16a6fa5be1b436bdf2d, < ba25efe15e8fd909884e113a86c6ccd07d88256e; >= 9c0826310bfb784c9bac7d1d9454e304185446c5, < 927ef409f713929dea2b9a5ed5bb65e712be0050; >= 9c0826310bfb784c9bac7d1d9454e304185446c5, < f4da3ee15de9944482382181329bb6d7335ca003; >= 6.1.159, < 6.1.178
LinuxLinux6.6

References

Timeline

Published
Oct 21, 2026
Last modified
Oct 26, 2026
NVD status
Received

Related CVEs from 2023

CVE-2023-73578.6A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addres
CVE-2023-7356: High severity, CVSS 8.8 | Vulnix