Lucene search
GoogleOSV:CVE-2024-36880HistoryMay 30, 2024 - 4:15 p.m.
CVE-2024-36880
2024-05-3016:15:00
Google
osv.dev
1
linux
kernel
vulnerability
resolved
bluetooth
firmware
sanity checks
memory
vmalloced buffer
AI Score
6.7
Confidence
Low
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.
References
git.kernel.org/linus/2e4edfa1e2bd821a317e7d006517dcf2f3fac68d
git.kernel.org/stable/c/02f05ed44b71152d5e11d29be28aed91c0489b4e
git.kernel.org/stable/c/1caceadfb50432dbf6d808796cb6c34ebb6d662c
git.kernel.org/stable/c/2e4edfa1e2bd821a317e7d006517dcf2f3fac68d
git.kernel.org/stable/c/427281f9498ed614f9aabc80e46ec077c487da6d
git.kernel.org/stable/c/ed53949cc92e28aaa3463d246942bda1fbb7f307
ubuntu.com/security/CVE-2024-36880
www.cve.org/CVERecord?id=CVE-2024-36880
Related
redhatcve
redhatcve
CVE-2024-36880
2024-06-02 16:02:52
vulnrichment
vulnrichment
CVE-2024-36880 Bluetooth: qca: add missing firmware sanity checks
2024-05-30 15:28:51
ubuntucve
ubuntucve
CVE-2024-36880
2024-05-30 00:00:00
debiancve
debiancve
CVE-2024-36880
2024-05-30 16:15:11
cve
cve
CVE-2024-36880
2024-05-30 16:15:11
nvd
nvd
CVE-2024-36880
2024-05-30 16:15:11
cvelist
cvelist
CVE-2024-36880 Bluetooth: qca: add missing firmware sanity checks
2024-05-30 15:28:51
openvas
openvas
Ubuntu: Security Advisory (USN-6950-4)
2024-08-22 00:00:00
Ubuntu: Security Advisory (USN-6950-1)
2024-08-09 00:00:00
Ubuntu: Security Advisory (USN-6950-3)
2024-08-14 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-08-13 00:00:00
Linux kernel (Oracle) vulnerabilities
2024-08-13 00:00:00
Linux kernel (HWE) vulnerabilities
2024-08-21 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6950-1)
2024-08-08 00:00:00
Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6950-4)
2024-08-21 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6950-2)
2024-08-13 00:00:00
osv
osv
linux-hwe-5.15 vulnerabilities
2024-08-21 17:06:20
mageia
mageia
Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities
2024-07-13 10:54:44
Updated kernel-linus packages fix security vulnerabilities
2024-07-14 08:23:38