CVE-2022-50233: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Affected products

• Linux Linux Kernel: from 4.14, before 6.0 (fixed in 6.0)

Published 2025-08-09. Last modified 2026-08-04.