← CVE Intelligence

CVE-2024-35963

Bluetooth: hci_sock: Fix not validating setsockopt user input PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length before copying data.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 before 781f3a97a38a338bc893b6db7f9f9670bf1a9e37; affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 before 0c18a64039aa3f1c16f208d197c65076da798137; affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 before 50173882bb187e70e37bac01385b9b114019bee2; affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 before b2186061d6043d6345a97100460363e990af0d46
Linux / Linuxaffected 5.16; unaffected 0 before 5.16; unaffected 6.1.113 through 6.1.*; unaffected 6.6.55 through 6.6.*; unaffected 6.8.7 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.