Vulnerability Details CVE-2024-36033
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix info leak when fetching board id
Add the missing sanity check when fetching the board id to avoid leaking
slab data when later requesting the firmware.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.2%
CVSS Severity
CVSS v3 Score 7.1
References
- https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197
- https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd
- https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209
- https://git.kernel.org/stable/c/bcccdc947d2ca5972b1e92d0dea10803ddc08ceb
- https://git.kernel.org/stable/c/f30c37cb4549baf8377434892d520fe7769bdba7
- https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197
- https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd
- https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209
- https://git.kernel.org/stable/c/bcccdc947d2ca5972b1e92d0dea10803ddc08ceb
- https://git.kernel.org/stable/c/f30c37cb4549baf8377434892d520fe7769bdba7
Products affected by CVE-2024-36033
-
cpe:2.3:o:linux:linux_kernel:6.7
-
cpe:2.3:o:linux:linux_kernel:6.7.1
-
cpe:2.3:o:linux:linux_kernel:6.7.10
-
cpe:2.3:o:linux:linux_kernel:6.7.11
-
cpe:2.3:o:linux:linux_kernel:6.7.12
-
cpe:2.3:o:linux:linux_kernel:6.7.2
-
cpe:2.3:o:linux:linux_kernel:6.7.3
-
cpe:2.3:o:linux:linux_kernel:6.7.4
-
cpe:2.3:o:linux:linux_kernel:6.7.5
-
cpe:2.3:o:linux:linux_kernel:6.7.6
-
cpe:2.3:o:linux:linux_kernel:6.7.7
-
cpe:2.3:o:linux:linux_kernel:6.7.8
-
cpe:2.3:o:linux:linux_kernel:6.7.9
-
cpe:2.3:o:linux:linux_kernel:6.8
-
cpe:2.3:o:linux:linux_kernel:6.8.1
-
cpe:2.3:o:linux:linux_kernel:6.8.2
-
cpe:2.3:o:linux:linux_kernel:6.8.3
-
cpe:2.3:o:linux:linux_kernel:6.8.4
-
cpe:2.3:o:linux:linux_kernel:6.8.5
-
cpe:2.3:o:linux:linux_kernel:6.8.6
-
cpe:2.3:o:linux:linux_kernel:6.8.7
-
cpe:2.3:o:linux:linux_kernel:6.8.8
-
cpe:2.3:o:linux:linux_kernel:6.8.9
-
cpe:2.3:o:linux:linux_kernel:6.9