5.5

CVE-2024-35933

Bluetooth: btintel: Fix null ptr deref in btintel_read_version

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: Fix null ptr deref in btintel_read_version

If hci_cmd_sync_complete() is triggered and skb is NULL, then
hdev->req_skb is NULL, which will cause this issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.19.312
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.274
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.215
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.155
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.86
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.27
Linux ≫ Linux Kernel Version >= 6.7 < 6.8.6
Debian ≫ Debian Linux Version10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Mailing List
https://git.kernel.org/stable/c/006936ecb4edfc3102464044f75858c714e34d28
Patch
https://git.kernel.org/stable/c/22d3053ef05f0b5045e45bd91e7473846261d65e
Patch
https://git.kernel.org/stable/c/68a69bb2ecafaacdb998a87783068fb51736f43b
Patch
https://git.kernel.org/stable/c/86e9b47e8a75c74b1bd83a479979b425c5dc8bd9
Patch
https://git.kernel.org/stable/c/b19fe5eea619d54eea59bb8a37c0f8d00ef0e912
Patch
https://git.kernel.org/stable/c/b79e040910101b020931ba0c9a6b77e81ab7f645
Patch
https://git.kernel.org/stable/c/ec2049fb2b8be3e108fe2ef1f1040f91e72c9990
Patch
https://git.kernel.org/stable/c/ffdca0a62abaf8c41d8d9ea132000fd808de329b
Patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html