First published: Wed Apr 17 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFT_OP_LE_MONITOR_ADVERTISEMENT.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=6.4.16<6.5 | |
Linux Kernel | >=6.5.3<6.6.23 | |
Linux Kernel | >=6.7<6.7.11 | |
Linux Kernel | >=6.8<6.8.2 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.119-1 6.12.10-1 6.12.11-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2024-26888 is classified as medium due to the potential for a memory leak.
CVE-2024-26888 affects Linux Kernel versions between 6.4.16 and 6.5, 6.5.3 and 6.6.23, 6.7 and 6.7.11, as well as 6.8 and 6.8.2.
To fix CVE-2024-26888, you should update the Linux Kernel to one of the patched versions such as 5.10.223-1 or 6.12.11-1.
Currently, there is no known workaround for CVE-2024-26888, and updating the kernel is the recommended action.
CVE-2024-26888 is a memory leak vulnerability in the Bluetooth module of the Linux kernel.