CVE-2024-35856

2024-05-1801:05:29

redhat.com

access.redhat.com

linux kernel

bluetooth

vulnerability

resolved

mediatek

double free

coredump

hci_devcd_append

skb

dan carpenter

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would free the skb on error so the caller don’t have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter