CVE-2024-56590CWE-120

CVE-2024-56590

High · published December 27, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet

This fixes not checking if skb really contains an ACL header otherwise

the code may attempt to access some uninitilized/invalid memory past the

valid skb->data.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-12-27T20:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 5.15.1745.15.174
linux/linux_kernel≥ 5.16, < 6.1.1206.1.120
linux/linux_kernel≥ 6.2, < 6.6.666.6.66
linux/linux_kernel≥ 6.7, < 6.12.56.12.5
References (6)
https://git.kernel.org/stable/c/219960a48771b35a3857a491b955c31d6c33d581 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3fe288a8214e7dd784d1f9b7c9e448244d316b47 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/559b1c7ac2e212a23b3833d3baf3bd957771d02e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5e50d12cc6e95e1fde08f5db6992b616f714b0fb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/93a6160dc198ffe5786da8bd8588cfd17f53b29a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 27 DEC 14:50Z
    Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
    cvelistv5