Hi,
https://www.zerodayinitiative.com/advisories/ZDI-24-1229/ https://patchwork.kernel.org/project/bluetooth/patch/20240912204458.3037144-1-luiz.de...@gmail.com/ https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=41f943630d9a03c40e95057b2ac3d96470b9c71e
The patch look unrelated to a potential RCE fix (it just prints a warning). Is there a mistake in the ZDI advisory? Cheers! Sylvain Beucler Debian LTS Team