Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-35850
HistoryMay 17, 2024 - 12:00 a.m.

CVE-2024-35850

2024-05-1700:00:00
ubuntu.com
ubuntu.com
6
linux
kernel
bluetooth
vulnerability
qualcomm
rome
controllers
null-deref
serdev
hci
uart
pointer

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix NULL-deref on non-serdev setup Qualcomm ROME
controllers can be registered from the Bluetooth line discipline and in
this case the HCI UART serdev pointer is NULL. Add the missing sanity check
to prevent a NULL-pointer dereference when setup() is called for a
non-serdev controller.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for UB:CVE-2024-35850