Skip to contentSkip to conversation

New: Malicious advertising data showed in dmesg

Bug 215681 [email protected] 1 participant 3 messages Mar 14, 2022 – Mar 16, 2022 Bluetooth drivers

lore
Share & tools
lore
#0 lore raw

https://bugzilla.kernel.org/show_bug.cgi?id=215681

            Bug ID: 215681
           Summary: Malicious advertising data showed in dmesg
           Product: Drivers
           Version: 2.5
    Kernel Version: 5.10.95
          Hardware: ARM
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Bluetooth
          Assignee: [email protected]
          Reporter: [email protected]
        Regression: No

Hi,

I have recently moved from Raspbian 9 to 10 which means kernel 4.19 to kernem 5.10 .
I use an application that advertises permanently and scans ble devices. Since the upgrade i noticed plenty of messages in dmesg output like this :

[Mon Mar 14 15:16:44 2022] Bluetooth: hci0: Malicious advertising data.

Stopping processing

This kind of messages were not displayed with 4.19 kernel

Any suggestions, how I can disable this flooding message?

Signature · 4 lines
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.
#1 lore raw

[Bug 215681] Malicious advertising data showed in dmesg

https://bugzilla.kernel.org/show_bug.cgi?id=215681

--- Comment #1 from Artem S. Tashkinov ([email protected]) --- If you can compile the kernel, please do.

Find the code which prints it and patch it this way:

https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=2d4b37b67cacbbad6fdb8621333f5ce48ae0e5fd

Signature · 4 lines
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.
#2 lore raw

[Bug 215681] Malicious advertising data showed in dmesg

In reply to [email protected]

https://bugzilla.kernel.org/show_bug.cgi?id=215681

--- Comment #2 from Olivier JUDITH ([email protected]) ---

Hi,

Yes i compiled before and i can do it again.
In the meanwhile i tried 5.15 and i've no Malicious messages displayed.

i'll we apply you suggestion

The issue come from hci_le_adv_report_evt in hci_event.h. i noticed that this function is a bit different in 5.15.

i also understood that the change was to evict flow of messages but the real cause seems to be a packet size is exceeded. Does this mean that my advertising is not correct ?

Signature · 4 lines
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.