CVE-2024-36033

2024-05-3016:15:11

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

cve-2024-36033

nvd

vulnerability

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix info leak when fetching board id

Add the missing sanity check when fetching the board id to avoid leaking
slab data when later requesting the firmware.

Affected configurations

Vulners

Node

linuxlinux_kernelRange6.7–6.8.10

linuxlinux_kernelRange6.9.0≥

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btqca.c"
    ],
    "versions": [
      {
        "version": "ad643241d455",
        "lessThan": "bcccdc947d2c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a381ee26d7c7",
        "lessThan": "ba307abed5e0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a7f8dedb4be2",
        "lessThan": "f30c37cb4549",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a7f8dedb4be2",
        "lessThan": "0adcf6be1445",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btqca.c"
    ],
    "versions": [
      {
        "version": "6.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.7",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]