CVE-2024-22099: NULL pointer deference in rfcomm_check_security in Linux kernel
Last updated 25 April 2025
Other sources
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.
Refer: https://bugzilla.openanolis.cn/showbug.cgi?id=7956 https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=6ec00b0737fe
— Red Hat
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.
This issue affects Linux kernel: v2.6.12-rc2.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22099?
CVE-2024-22099 is considered a high-severity vulnerability due to its potential to cause serious system instability.
How do I fix CVE-2024-22099?
To fix CVE-2024-22099, update the Linux kernel to one of the patched versions such as 5.10.223-1 or 6.12.12-1.
What systems are affected by CVE-2024-22099?
CVE-2024-22099 affects systems running specific versions of the Linux kernel, particularly those with Bluetooth modules.
What type of vulnerability is CVE-2024-22099?
CVE-2024-22099 is a Null Pointer Dereference vulnerability that can lead to overflow buffers in affected systems.
Is there a known exploit for CVE-2024-22099?
As of now, there are no widely reported exploits for CVE-2024-22099, but the risk remains due to its nature.