5.5

CVE-2024-35978

Bluetooth: Fix memory leak in hci_req_sync_complete()

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix memory leak in hci_req_sync_complete()

In 'hci_req_sync_complete()', always free the previous sync
request state before assigning reference to a new one.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.1 < 4.19.313
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.275
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.216
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.156
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.87
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.28
Linux ≫ Linux Kernel Version >= 6.7 < 6.8.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.194
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
https://git.kernel.org/stable/c/45d355a926ab40f3ae7bc0b0a00cb0e3e8a5a810
Patch
https://git.kernel.org/stable/c/4beab84fbb50df3be1d8f8a976e6fe882ca65cb2
Patch
https://git.kernel.org/stable/c/66fab1e120b39f8f47a94186ddee36006fc02ca8
Patch
https://git.kernel.org/stable/c/75193678cce993aa959e7764b6df2f599886dd06
Patch
https://git.kernel.org/stable/c/8478394f76c748862ef179a16f651f752bdafaf0
Patch
https://git.kernel.org/stable/c/89a32741f4217856066c198a4a7267bcdd1edd67
Patch
https://git.kernel.org/stable/c/9ab5e44b9bac946bd49fd63264a08cd1ea494e76
Patch
https://git.kernel.org/stable/c/e4cb8382fff6706436b66eafd9c0ee857ff0a9f5
Patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html