A missing length check in the Linux kernel Bluetooth HIDP implementation could allow an unauthenticated attacker to cause a denial of service or execute arbitrary code.

The function hidp_input_report fails to verify that the skb length contains sufficient data before reading keyboard and mouse payload information. This lack of validation allows an unauthenticated attacker on the adjacent network to trigger an out-of-bounds read or memory corruption.

With a CVSS score of 8.8, this vulnerability poses a severe risk to system security. Successful exploitation could lead to full system compromise or persistent service disruption, making it a critical priority for security teams managing Linux environments.

Immediate Action: Update the Linux kernel to version 5.15.210, 6.1.176, 6.6.143, or 6.12.93 to incorporate the necessary bounds checking.

Proactive Monitoring: Use system monitoring tools to detect abnormal kernel behavior or crashes following Bluetooth activity.

Compensating Controls: Deploy network-level protections or restrict Bluetooth connectivity to environments where such communication is strictly governed and monitored.

Public Exploit Available: Unknown

Security administrators must ensure that all systems running the affected Linux kernel versions are updated as soon as possible. The inherent risks associated with kernel memory corruption make immediate patching the required course of action.