{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"9427f6081f37c795a8bd29d0ee72a4da3bd64af8","status":"affected","version":"eb9e749c0182affafadfbe5ded4503c4b5a9b57c","versionType":"git"},{"lessThan":"7b8526bb489780ccc0caffc446ecabec83cfe568","status":"affected","version":"eb9e749c0182affafadfbe5ded4503c4b5a9b57c","versionType":"git"},{"lessThan":"3aa1dc3c9060e335e82e9c182bf3d1db29220b1b","status":"affected","version":"eb9e749c0182affafadfbe5ded4503c4b5a9b57c","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.34","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38315","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: Check dsbr size from EFI variable\n\nSince the size of struct btintel_dsbr is already known, we can just\nstart there instead of querying the EFI variable size. If the final\nresult doesn't match what we expect also fail. This fixes a stack buffer\noverflow when the EFI variable is larger than struct btintel_dsbr.","epss":{"date":"2026-11-05","percentile":0.05628,"score":0.00164},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912552587,"publishedAt":1752133342569,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9427f6081f37c795a8bd29d0ee72a4da3bd64af8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7b8526bb489780ccc0caffc446ecabec83cfe568"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3aa1dc3c9060e335e82e9c182bf3d1db29220b1b"}],"remediation":[],"revision":"cb49d494c3a951340ff51d354556df45045769796796d1c50a58f0102c4617e3","sources":[{"modifiedAt":1793912552587,"name":"CNA: Linux","retrievedAt":1793913652000,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38315"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913671244,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38315"}],"ssvc":{"assessedAt":1793912060513,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Bluetooth: btintel: Check dsbr size from EFI variable","updatedAt":1793913671244}