CVE-2024-21803

2024-01-3008:15:41

Debian Security Bug Tracker

security-tracker.debian.org

linux

kernel

use after free

vulnerability

local execution

code

bluetooth modules

arm

x86

cve-2024-21803

gitee

program files

unix

version 2.6.12-rc2

version 6.8-rc1

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C. This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux<= 6.1.94-1linux_6.1.94-1_all.deb
Debian11alllinux<= 5.10.218-1linux_5.10.218-1_all.deb
Debian999alllinux<= 6.9.7-1linux_6.9.7-1_all.deb
Debian13alllinux<= 6.8.12-1linux_6.8.12-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	<= 6.1.94-1	linux_6.1.94-1_all.deb
Debian	11	all	linux	<= 5.10.218-1	linux_5.10.218-1_all.deb
Debian	999	all	linux	<= 6.9.7-1	linux_6.9.7-1_all.deb
Debian	13	all	linux	<= 6.8.12-1	linux_6.8.12-1_all.deb