CVE-2024-35964

HIGH

Linux Kernel 6.0-6.1.118, 6.2-6.6.54, 6.7-6.8.6 - Improper Input Validation in Bluetooth ISO Setsockopt

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data.

References (5)

Core 5

Scores

CVSS v3 7.1
EPSS 0.0025
EPSS Percentile 16.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1284
Status published
Products (15)
linux/Kernel 6.0.0 - 6.1.119linux
linux/Kernel 6.2.0 - 6.6.55linux
linux/Kernel 6.7.0 - 6.8.7linux
Linux/Linux < 6.0
Linux/Linux 6.0
Linux/Linux 6.1.119 - 6.1.*
Linux/Linux 6.6.55 - 6.6.*
Linux/Linux 6.8.7 - 6.8.*
Linux/Linux 6.9
Linux/Linux ccf74f2390d60a2f9a75ef496d2564abb478f46a - 0c4a89f4690478969729c7ba5f69d53d8516aa12
... and 5 more
Published May 20, 2024
Tracked Since Feb 18, 2026