CVE-2024-26887

Summary

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: Fix memory leak

This checks if CONFIG_DEV_COREDUMP is enabled before attempting to clone the skb and also make sure btmtk_process_coredump frees the skb passed following the same logic.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0b70151328781a89c89e4cf3fae21fc0e98d869e < 620b9e60e4b55fa55540ce852a0f3c9e6091dbbcaffected
LinuxLinux0b70151328781a89c89e4cf3fae21fc0e98d869e < b10e6f6b160a60b98fb7476028f5a95405bbd725affected
LinuxLinux0b70151328781a89c89e4cf3fae21fc0e98d869e < b08bd8f02a24e2b82fece5ac51dc1c3d9aa6c404affected
LinuxLinux0b70151328781a89c89e4cf3fae21fc0e98d869e < 79f4127a502c5905f04da1f20a7bbe07103fb77caffected
LinuxLinux6.6affected
LinuxLinux0 < 6.6unaffected
LinuxLinux6.6.23 <= 6.6.*unaffected
LinuxLinux6.7.11 <= 6.7.*unaffected
LinuxLinux6.8.2 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References