In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is …
High CVSS 8.0
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is releasing, timeout_work will be scheduled to judge whether the sco disconnection is timeout. The sock will be deallocated later, but it is dereferenced again in sco_sock_timeout. As a result, the use-after-free bugs will happen. The root cause is shown below: Cleanup Thread | …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/012363cb1bec5f33a7b94629ab2c1086f30280f2 Patch
- https://git.kernel.org/stable/c/1b33d55fb7355e27f8c82cd4ecd560f162469249 Patch
- https://git.kernel.org/stable/c/3212afd00e3cda790fd0583cb3eaef8f9575a014 Patch
- https://git.kernel.org/stable/c/33a6e92161a78c1073d90e27abe28d746feb0a53 Patch
- https://git.kernel.org/stable/c/483bc08181827fc475643272ffb69c533007e546 Patch
- https://git.kernel.org/stable/c/50c2037fc28df870ef29d9728c770c8955d32178 Patch
- https://git.kernel.org/stable/c/6a18eeb1b3bbc67c20d9609c31dca6a69b4bcde5 Patch
- https://git.kernel.org/stable/c/bfab2c1f7940a232cd519e82fff137e308abfd93 Patch
- http://www.openwall.com/lists/oss-security/2024/11/29/1 Mailing List
- http://www.openwall.com/lists/oss-security/2024/11/30/1 Mailing List
- http://www.openwall.com/lists/oss-security/2024/11/30/2 Mailing List
- https://git.kernel.org/stable/c/012363cb1bec5f33a7b94629ab2c1086f30280f2 Patch
- https://git.kernel.org/stable/c/1b33d55fb7355e27f8c82cd4ecd560f162469249 Patch
- https://git.kernel.org/stable/c/3212afd00e3cda790fd0583cb3eaef8f9575a014 Patch
- https://git.kernel.org/stable/c/33a6e92161a78c1073d90e27abe28d746feb0a53 Patch
- https://git.kernel.org/stable/c/483bc08181827fc475643272ffb69c533007e546 Patch
- https://git.kernel.org/stable/c/50c2037fc28df870ef29d9728c770c8955d32178 Patch
- https://git.kernel.org/stable/c/6a18eeb1b3bbc67c20d9609c31dca6a69b4bcde5 Patch
- https://git.kernel.org/stable/c/bfab2c1f7940a232cd519e82fff137e308abfd93 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240912-0012/ Third Party Advisory
Timeline
- nvd_ingest NVD