CVE-2024-24859: falha de média gravidade em Linux kernel
Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.6epss 0.7%
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H
Produtos afetados
Linux · Linux kernelCVEs relacionadas — Linux kernel
No mesmo produto, das mais perigosas para as menos.
CVE-2019-11477HIGHInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsEPSS 98.7%CVE-2019-11478MEDIUMSACK can cause extensive memory use via fragmented resend queueEPSS 94.4%CVE-2019-11479MEDIUMCVE-2019-11479EPSS 91.3%CVE-2021-3490HIGHLinux kernel eBPF bitwise ops ALU32 bounds trackingEPSS 27.4%CVE-2024-24860MEDIUMRace condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()EPSS 0.8%CVE-2021-3491HIGHLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypassEPSS 0.6%