CVE-2024-35978CWE-401

CVE-2024-35978

Medium · published May 20, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix memory leak in hci_req_sync_complete()

In 'hci_req_sync_complete()', always free the previous sync

request state before assigning reference to a new one.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-05-20T14:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.1, < 4.19.3134.19.313
linux/linux_kernel≥ 4.20, < 5.4.2755.4.275
linux/linux_kernel≥ 5.5, < 5.10.2165.10.216
linux/linux_kernel≥ 5.11, < 5.15.1565.15.156
linux/linux_kernel≥ 5.16, < 6.1.876.1.87
linux/linux_kernel≥ 6.2, < 6.6.286.6.28
linux/linux_kernel≥ 6.7, < 6.8.76.8.7
References (19)
https://git.kernel.org/stable/c/45d355a926ab40f3ae7bc0b0a00cb0e3e8a5a810 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4beab84fbb50df3be1d8f8a976e6fe882ca65cb2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/66fab1e120b39f8f47a94186ddee36006fc02ca8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/75193678cce993aa959e7764b6df2f599886dd06 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8478394f76c748862ef179a16f651f752bdafaf0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/89a32741f4217856066c198a4a7267bcdd1edd67 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9ab5e44b9bac946bd49fd63264a08cd1ea494e76 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e4cb8382fff6706436b66eafd9c0ee857ff0a9f5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/45d355a926ab40f3ae7bc0b0a00cb0e3e8a5a810 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4beab84fbb50df3be1d8f8a976e6fe882ca65cb2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/66fab1e120b39f8f47a94186ddee36006fc02ca8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/75193678cce993aa959e7764b6df2f599886dd06 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8478394f76c748862ef179a16f651f752bdafaf0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/89a32741f4217856066c198a4a7267bcdd1edd67 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9ab5e44b9bac946bd49fd63264a08cd1ea494e76 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e4cb8382fff6706436b66eafd9c0ee857ff0a9f5 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 20 MAY 09:42Z
    Bluetooth: Fix memory leak in hci_req_sync_complete()
    cvelistv5