CVE-2024-35856: Bluetooth: btusb: mediatek: Fix double free of skb in coredump
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: mediatek: Fix double free of skb in coredump
hcidevcdappend() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb.
Reported-by : Dan Carpenter <dan.carpenter@linaro.org>
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35856?
CVE-2024-35856 is classified as a moderate severity vulnerability due to its potential impact on system stability and integrity.
How do I fix CVE-2024-35856?
To fix CVE-2024-35856, update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
Which versions of the Linux kernel are affected by CVE-2024-35856?
CVE-2024-35856 affects Linux kernel versions from 6.6.0 up to 6.6.30, as well as several release candidates of version 6.9.
What component of the Linux kernel is affected in CVE-2024-35856?
CVE-2024-35856 affects the Bluetooth subsystem, specifically the btusb component, which deals with memory management for coredumps.
Is CVE-2024-35856 exploitable remotely?
CVE-2024-35856 is not specifically noted as remotely exploitable, but could affect systems if exploited locally.