---
id: CVE-2022-50233
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

  Both dev_name and short_name are not guaranteed to be NULL terminated so
  this instead use strnlen and…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

  Both dev_name and short_name are not guaranteed to be NULL terminated so
  this instead use strnlen and…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 4.14, < 6.0'
patched:
  - linux_kernel 6.0
published: '2025-08-09'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:28.033'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-50233'
references:
  - url: 'https://git.kernel.org/stable/c/dd7b8cdde098cf9f7c8de409b5b7bbb98f97be80'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.0014
epssPercentile: 0.03313
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:30:31.967277Z'
ingestedAt: '2026-10-15T21:45:11.281Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so
this instead use strnlen and then attempt to determine if the resulting
string needs to be truncated or not.

## Affected

- `linux_kernel >= 4.14, < 6.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.0`