CVE-2024-35963

2024-05-2017:10:13

redhat.com

access.redhat.com

linux kernel

bluetooth vulnerability

user input length

data copying

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length before copying data.

References

bugzilla.redhat.com/show_bug.cgi?id=2281914

lore.kernel.org/linux-cve-announce/2024052021-CVE-2024-35963-7934@gregkh/T

nvd.nist.gov/vuln/detail/CVE-2024-35963

www.cve.org/CVERecord?id=CVE-2024-35963