CVE-2021-31611

Name of the Vulnerable Software and Affected Versions Zhuhai Jieli AC690X and AC692X devices (affected versions not specified)

Description The Bluetooth Classic implementation does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers in radio range to deadlock a device via a crafted LMP packet. The user needs to manually reboot the device to restore communication. This issue exists due to insufficient input validation in the Bluetooth Classic implementation.

Recommendations For Zhuhai Jieli AC690X and AC692X devices, as a temporary workaround, consider restricting access to the Bluetooth Classic implementation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.