CVE-2024-56590

The CVE-2024-56590 entry concerns the Linux kernel Bluetooth stack (hci_core) and a fix for not checking whether skb actually contains an ACL header in hci_acldata_packet. The issue could cause access to uninitialized/invalid memory beyond skb->data when an ACL header is absent. The fix is a k...

CVE-2024-56590: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix not checking skb length on hciacldatapacket This fixes not checking if skb really contains an ACL header otherwise the code may attempt to access some uninitilized/invalid memory past the valid skb-data...