github - ghsa-qv2f-765q-7wrf

ghsa-qv2f-765q-7wrf

Vulnerability from github

Published

2024-05-20 12:30

Modified

2025-11-04 00:30

Severity ?

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sock: Fix not validating setsockopt user input

Check user input length before copying data.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-35963"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-20T10:15:11Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: Fix not validating setsockopt user input\n\nCheck user input length before copying data.",
  "id": "GHSA-qv2f-765q-7wrf",
  "modified": "2025-11-04T00:30:48Z",
  "published": "2024-05-20T12:30:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35963"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2024-35963 (GCVE-0-2024-35963)

Vulnerability from cvelistv5

Published

2024-05-20 09:41

Modified

2025-11-03 21:55

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length before copying data.

References

URL

Tags

	https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37
	https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137
	https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2
	https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46

Impacted products

Vendor

Product

Version

Version: 09572fca7223bcf32c9f0d5e100d8381a81d55f4
Version: 09572fca7223bcf32c9f0d5e100d8381a81d55f4
Version: 09572fca7223bcf32c9f0d5e100d8381a81d55f4
Version: 09572fca7223bcf32c9f0d5e100d8381a81d55f4

Version: 5.16

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:55:05.767Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-35963",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:40:29.376948Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:13.806Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "781f3a97a38a338bc893b6db7f9f9670bf1a9e37",
              "status": "affected",
              "version": "09572fca7223bcf32c9f0d5e100d8381a81d55f4",
              "versionType": "git"
            },
            {
              "lessThan": "0c18a64039aa3f1c16f208d197c65076da798137",
              "status": "affected",
              "version": "09572fca7223bcf32c9f0d5e100d8381a81d55f4",
              "versionType": "git"
            },
            {
              "lessThan": "50173882bb187e70e37bac01385b9b114019bee2",
              "status": "affected",
              "version": "09572fca7223bcf32c9f0d5e100d8381a81d55f4",
              "versionType": "git"
            },
            {
              "lessThan": "b2186061d6043d6345a97100460363e990af0d46",
              "status": "affected",
              "version": "09572fca7223bcf32c9f0d5e100d8381a81d55f4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.55",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.7",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: Fix not validating setsockopt user input\n\nCheck user input length before copying data."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T09:09:20.473Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37"
        },
        {
          "url": "https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137"
        },
        {
          "url": "https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2"
        },
        {
          "url": "https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46"
        }
      ],
      "title": "Bluetooth: hci_sock: Fix not validating setsockopt user input",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-35963",
    "datePublished": "2024-05-20T09:41:53.861Z",
    "dateReserved": "2024-05-17T13:50:33.137Z",
    "dateUpdated": "2025-11-03T21:55:05.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.