CVE-2024-43884
Bluetooth: MGMT: Add error handling to pair_device()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.3
References 8
git.kernel.org
- stable/c/11b4b0e63f2621b33b2e107407a7d67a65994ca1
- stable/c/90e1ff1c15e5a8f3023ca8266e3a85869ed03ee9
- stable/c/9df9783bd85610d3d6e126a1aca221531f6f6dcb
- stable/c/951d6cb5eaac5130d076c728f2a6db420621afdb
- stable/c/5da2884292329bc9be32a7778e0e119f06abe503
- stable/c/064dd929c76532359d2905d90a7c12348043cfd4
- stable/c/ee0799103b1ae4bcfd80dc11a15df085f6ee1b61
- stable/c/538fd3921afac97158d4177139a0ad39f056dbb2