CVE-2024-22099: falha de média gravidade em Linux kernel
NULL pointer deference in rfcomm_check_security in Linux kernel
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.6%
probabilidade de exploração
0.6%top 52% das CVEs
exploração observada
nãonenhuma fonte reporta
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.
This issue affects Linux kernel: v2.6.12-rc2.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Linux · Linux kernelCVEs relacionadas — Linux kernel
No mesmo produto, das mais perigosas para as menos.
CVE-2019-11477HIGHInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsEPSS 98.7%CVE-2019-11478MEDIUMSACK can cause extensive memory use via fragmented resend queueEPSS 94.7%CVE-2019-11479MEDIUMCVE-2019-11479EPSS 91.7%CVE-2021-3490HIGHLinux kernel eBPF bitwise ops ALU32 bounds trackingEPSS 27.2%CVE-2024-24860MEDIUMRace condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()EPSS 0.8%CVE-2024-24859MEDIUMRace condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()EPSS 0.7%
Referências
https://bugzilla.openanolis.cn/show_bug.cgi?id=7956https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlhttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/