CVE-2024-21803 — Possible UAF in bt_accept_poll in Linux kernel

CVE-2024-21803

Possible UAF in bt_accept_poll in Linux kernel PUBLISHED

Description (CNA)

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C. This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.

Affected (CNA)

Vendor / product	Versions
Linux / Linux kernel	affected v2.6.12-rc2 before v6.8-rc1

CWE

CWE-416

References

https://bugzilla.openanolis.cn/show_bug.cgi?id=8081

ADP enrichment

CVE

No English description supplied.

https://bugzilla.openanolis.cn/show_bug.cgi?id=8081

CISA-ADP

No English description supplied.

No references supplied.