CVE-2024-35850

Bluetooth: qca: fix NULL-deref on non-serdev setup

published May 17, 2024

CVSS
—
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix NULL-deref on non-serdev setup

Qualcomm ROME controllers can be registered from the Bluetooth line

discipline and in this case the HCI UART serdev pointer is NULL.

Add the missing sanity check to prevent a NULL-pointer dereference when

setup() is called for a non-serdev controller.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2024-05-17T14:47Z
EPSS history
Timeline
  • 17 MAY 14:47Z
    Bluetooth: qca: fix NULL-deref on non-serdev setup
    cvelistv5