CVE-2024-35856CWE-415

CVE-2024-35856

High · published May 17, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: Fix double free of skb in coredump

hci_devcd_append() would free the skb on error so the caller don't

have to free it again otherwise it would cause the double free of skb.

Reported-by : Dan Carpenter <[email protected]>

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Weakness
CWE-415 · Double Free
Published
2024-05-17T19:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.306.6.30
linux/linux_kernel≥ 6.7, < 6.8.96.8.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/18bdb386a1a30e7a3d7732a98e45e69cf6b5710d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e20093c741d8da9f6390dd45d75b779861547035 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/18bdb386a1a30e7a3d7732a98e45e69cf6b5710d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e20093c741d8da9f6390dd45d75b779861547035 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 14:47Z
    Bluetooth: btusb: mediatek: Fix double free of skb in coredump
    cvelistv5