IT

Tracker / CVE-2024-56590

CVE-2024-56590

High 7.6

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet This fixes not checking if skb really contains an ACL header otherwise the code may attempt to access some uninitilized/invalid memory past the valid skb->data.

Affected products and versions

linux linux_kernel · … → 5.15.174
linux linux_kernel · 5.16 → 6.1.120
linux linux_kernel · 6.2 → 6.6.66
linux linux_kernel · 6.7 → 6.12.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References