An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.32 | 4.9.337 |
| linux / linux_kernel | 4.10 | 4.14.303 |
| linux / linux_kernel | 4.15 | 4.19.270 |
| linux / linux_kernel | 4.20 | 5.4.229 |
| linux / linux_kernel | 5.5 | 5.10.161 |
| linux / linux_kernel | 5.11 | 5.15.85 |
| linux / linux_kernel | 5.16 | 6.0.15 |
| fedoraproject / fedora | 37 | 37.x |
| debian / debian_linux | 11.0 | 11.0.x |