BaselineWatch
Desk

CVE-2023-7356

8.8 high exploit Published

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Public exploits 1

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Change history 8

  1. StatusReceived → PublishedNVD modified 2026-10-26 06:55
  2. StatusPublished → ReceivedNVD modified 2026-10-26 07:17
  3. StatusReceived → PublishedNVD modified 2026-10-24 14:08
  4. StatusPublished → ReceivedNVD modified 2026-10-24 14:16
  5. CVSS8.8 (v3.1, CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)NVD modified 2026-10-24 14:16
  6. StatusReceived → PublishedNVD modified 2026-10-21 14:59
  7. StatusPublished → ReceivedNVD modified 2026-10-21 15:17
  8. First seenunscored · linuxNVD modified 2026-10-21 14:59

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 3