Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-26889

Bluetooth: hci_core: Fix possible buffer overflow

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.191, and 5 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.19.297 · fixed in 4.19.311; From 5.4.259 · fixed in 5.4.273; From 5.10.199 · fixed in 5.10.214; From 5.15.137 · fixed in 5.15.153; From 6.1.60 · fixed in 6.1.191; From 4.14.328 · fixed in 4.15; From 6.5.9 · fixed in 6.6

  • Linux Linux

    6.6

  • KernelLinux

    fixed in 4.19.311; From 4.20.0 · fixed in 5.4.273; From 5.5.0 · fixed in 5.10.214; From 5.11.0 · fixed in 5.15.153; From 5.16.0 · fixed in 6.6.23; From 6.6.0 · fixed in 6.7.11; From 6.7.0 · fixed in 6.8.2

References 9

git.kernel.org