---
id: "CVE-2023-7356"
kind: "vulnerability"
aliases: ["CVE-2023-7356"]
title: "Linux kernel: Bluetooth ISO service data copy flaw, impact unclear"
severity: "unknown"
cvss: null
epss: 0.00166
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["bluetooth", "embedded", "infrastructure", "kernel", "linux"]
not_affected_if: ["bluetooth-module-disabled", "no-bluetooth-hardware"]
published_at: "2026-10-21T15:17:12+00:00"
first_seen_at: "2026-10-23T21:57:28+00:00"
updated_at: "2026-10-25T05:02:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7356", "first_seen_at": "2026-10-23T21:57:28+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-7356", "first_seen_at": "2026-10-24T13:15:54+00:00"}]
---

# Linux kernel: Bluetooth ISO service data copy flaw, impact unclear

The Linux kernel's Bluetooth ISO code copied Periodic Advertisement Report content into the BASE buffer without first checking the service UUID, and the fix limits the copy to Basic Audio Announcement Service data. The sources do not describe a concrete attacker outcome.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `uname -r` and compare against the kernel version that carries the upstream fix for CVE-2023-7356
- Check whether Bluetooth LE Audio (ISO) support is loaded with `lsmod | grep bluetooth`

## Fix

- Update the Linux kernel to a stable release that includes the upstream fix for CVE-2023-7356 (exact version unknown from sources)

## Timeline

- 2026-10-23T21:57:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-7356
- 2026-10-24T13:15:54+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2023-7356

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

Copy the content of a Periodic Advertisement Report to BASE only if
the service UUID is Basic Audio Announcement Service UUID.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_