Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26889
HistoryApr 17, 2024 - 6:28 p.m.

CVE-2024-26889

2024-04-1718:28:43
redhat.com
access.redhat.com
5
cve-2024-26889
linux kernel
buffer overflow
bluetooth
hci_core
hci_dev_info
strscpy

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%