CVE-2024-22099

MEDIUM

NULL pointer deference in rfcomm_check_security in Linux kernel

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-22099 has a selected CVSS score of 6.3 (medium).

Description

NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Linux kernel

Browse Linux / Linux kernelkernel

Default status: unaffected

CVE Listv2.6.12-rc2 to < v6.8-rc1affected

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Browse Siemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Default status: unknown

CVE ListBefore *affected

References

7