CVE-2024-36033

2024-05-3016:15:11

Linux

web.nvd.nist.gov

cve-2024-36033

nvd

vulnerability

AI Score

6.7

Confidence

Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix info leak when fetching board id

Add the missing sanity check when fetching the board id to avoid leaking
slab data when later requesting the firmware.

Affected configurations

Vulners

Node

linuxlinux_kernelRange6.7–6.8.10

linuxlinux_kernelRange6.9.0≥

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btqca.c"
    ],
    "versions": [
      {
        "version": "c3c1bd421db6",
        "lessThan": "a3dff121a7f5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ad643241d455",
        "lessThan": "bcccdc947d2c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a381ee26d7c7",
        "lessThan": "ba307abed5e0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a7f8dedb4be2",
        "lessThan": "f30c37cb4549",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a7f8dedb4be2",
        "lessThan": "0adcf6be1445",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btqca.c"
    ],
    "versions": [
      {
        "version": "6.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.7",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]