CVE-2024-21803CWE-416

Possible UAF in bt_accept_poll in Linux kernel

Low · published January 30, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.

This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-416 · Use After Free
Published
2024-01-30T07:15Z
EPSS history
Timeline
  • 30 JAN 07:15Z
    Possible UAF in bt_accept_poll in Linux kernel
    cvelistv5