• 公告ID (KylinSec-SA-2024-3173)

摘要:

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix NULL-deref on non-serdev setup

Qualcomm ROME controllers can be registered from the Bluetooth line
discipline and in this case the HCI UART serdev pointer is NULL.

Add the missing sanity check to prevent a NULL-pointer dereference when
setup() is called for a non-serdev controller.

安全等级: Low

公告ID: KylinSec-SA-2024-3173

发布日期: 2024年7月16日

关联CVE: CVE-2024-35850  

  • 详细介绍

1. 漏洞描述

   

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix NULL-deref on non-serdev setup

Qualcomm ROME controllers can be registered from the Bluetooth line
discipline and in this case the HCI UART serdev pointer is NULL.

Add the missing sanity check to prevent a NULL-pointer dereference when
setup() is called for a non-serdev controller.

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2024-35850 KY3.4-5A kernel Unaffected
CVE-2024-35850 KY3.5.2 kernel Unaffected
CVE-2024-35850 V6 kernel Unaffected

3. 影响组件

    无

4. 修复版本

    无

5. 修复方法

   无

6. 下载链接

    无
上一篇:KylinSec-SA-2024-3172 下一篇:KylinSec-SA-2024-3174