Redhat.comRH:CVE-2024-35965

HistoryMay 20, 2024 - 5:10 p.m.

CVE-2024-35965

2024-05-2017:10:23

redhat.com

access.redhat.com

linux kernel

bluetooth

vulnerability

validated

user input

length

data copying

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user input length before copying data.

References

bugzilla.redhat.com/show_bug.cgi?id=2281909

lore.kernel.org/linux-cve-announce/2024052021-CVE-2024-35965-19f1@gregkh/T

nvd.nist.gov/vuln/detail/CVE-2024-35965

www.cve.org/CVERecord?id=CVE-2024-35965