Description
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2.
References (6)
Core 6
Core References
Issue Tracking, Permissions Required
https://bugzilla.openanolis.cn/show_bug.cgi?id=7956
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Scores
CVSS v3
6.3
EPSS
0.0061
EPSS Percentile
44.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (2)
Linux/Linux kernel
v2.6.12-rc2 - v6.8-rc1
linux/linux_kernel
2.6.12 rc2
Published
Jan 25, 2024
Tracked Since
Feb 18, 2026