CVE - CVE-2024-35967

CVE-ID
CVE-2024-35967	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsockopt() is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/419a0ffca7010216f0fc265b08558d7394fa0ba7 URL:https://git.kernel.org/stable/c/419a0ffca7010216f0fc265b08558d7394fa0ba7 MISC:https://git.kernel.org/stable/c/51eda36d33e43201e7a4fd35232e069b2c850b01 URL:https://git.kernel.org/stable/c/51eda36d33e43201e7a4fd35232e069b2c850b01 MISC:https://git.kernel.org/stable/c/72473db90900da970a16ee50ad23c2c38d107d8c URL:https://git.kernel.org/stable/c/72473db90900da970a16ee50ad23c2c38d107d8c MISC:https://git.kernel.org/stable/c/7bc65d23ba20dcd7ecc094a12c181e594e5eb315 URL:https://git.kernel.org/stable/c/7bc65d23ba20dcd7ecc094a12c181e594e5eb315 MISC:https://git.kernel.org/stable/c/b0e30c37695b614bee69187f86eaf250e36606ce URL:https://git.kernel.org/stable/c/b0e30c37695b614bee69187f86eaf250e36606ce MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3842-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)