CVE-2024-24860: falha de média gravidade em Linux kernel
Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.6epss 0.8%
A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
Produtos afetados
Linux · Linux kernelCVEs relacionadas — Linux kernel
No mesmo produto, das mais perigosas para as menos.
CVE-2019-11477HIGHInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsEPSS 98.7%CVE-2019-11478MEDIUMSACK can cause extensive memory use via fragmented resend queueEPSS 94.4%CVE-2019-11479MEDIUMCVE-2019-11479EPSS 91.3%CVE-2021-3490HIGHLinux kernel eBPF bitwise ops ALU32 bounds trackingEPSS 27.4%CVE-2024-24859MEDIUMRace condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()EPSS 0.7%CVE-2021-3491HIGHLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypassEPSS 0.6%