Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43884
HistoryAug 26, 2024 - 7:11 a.m.

CVE-2024-43884 Bluetooth: MGMT: Add error handling to pair_device()

2024-08-2607:11:58
Linux
github.com
3
cve-2024-43884
linux kernel
bluetooth
mgmt
error handling
pair_device
hci_conn_params_add
null pointer dereference

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Add error handling to pair_device()

hci_conn_params_add() never checks for a NULL value and could lead to a NULL
pointer dereference causing a crash.

Fixed by adding error handling in the function.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial