CVE-2024-35856

HIGH

Linux Kernel 6.6-6.6.29, 6.7-6.8.8 - Use-After-Free in Bluetooth Mediatek Coredump Handler

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter <[email protected]>

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1

Patch

https://git.kernel.org/stable/c/e20093c741d8da9f6390dd45d75b779861547035

Patch

https://git.kernel.org/stable/c/18bdb386a1a30e7a3d7732a98e45e69cf6b5710d

Scores

CVSS v3 7.8

EPSS 0.0025

EPSS Percentile 15.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-415

Status published

Products (12)

linux/Kernel 6.6.0 - 6.6.30linux

linux/Kernel 6.7.0 - 6.8.9linux

Linux/Linux < 6.6

Linux/Linux 0b70151328781a89c89e4cf3fae21fc0e98d869e - 18bdb386a1a30e7a3d7732a98e45e69cf6b5710d

Linux/Linux 0b70151328781a89c89e4cf3fae21fc0e98d869e - 80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1

Linux/Linux 0b70151328781a89c89e4cf3fae21fc0e98d869e - e20093c741d8da9f6390dd45d75b779861547035

Linux/Linux 6.6

Linux/Linux 6.6.30 - 6.6.*

Linux/Linux 6.8.9 - 6.8.*

Linux/Linux 6.9

... and 2 more

Published May 17, 2024

Tracked Since Feb 18, 2026