CVE-2024-26887: Bluetooth: btusb: Fix memory leak
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: Fix memory leak
This checks if CONFIGDEVCOREDUMP is enabled before attempting to clone the skb and also make sure btmtkprocesscoredump frees the skb passed following the same logic.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26887?
CVE-2024-26887 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26887?
To fix CVE-2024-26887, update your Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which affected software versions contain CVE-2024-26887?
CVE-2024-26887 affects Linux kernel versions between 6.6 and 6.6.23, 6.7 and 6.7.11, and 6.8 and 6.8.2.
Is there a specific configuration required to be vulnerable to CVE-2024-26887?
Yes, CONFIG_DEV_COREDUMP must be enabled for CVE-2024-26887 to be a concern.
What type of vulnerability is CVE-2024-26887 related to?
CVE-2024-26887 is related to a memory leak vulnerability in the Bluetooth component of the Linux kernel.