CVE-2024-22099CWE-476

CVE-2024-22099

Medium · published January 25, 2024

CVSS v3.1
6.3
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.

This issue affects Linux kernel: v2.6.12-rc2.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00610 · 48.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-01-25T12:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernelall versions—
References (11)
https://bugzilla.openanolis.cn/show_bug.cgi?id=7956 · [email protected]https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · [email protected]https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/ · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/ · [email protected]https://bugzilla.openanolis.cn/show_bug.cgi?id=7956 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 25 JAN 07:02Z
    NULL pointer deference in rfcomm_check_security in Linux kernel
    cvelistv5