Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-36032
HistoryMay 30, 2024 - 4:15 p.m.

CVE-2024-36032

2024-05-3016:15:11
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
bluetooth
qca
info leak
sanity checks
stack data
debugfs

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix info leak when fetching fw build id

Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%