ghsa-6x8f-vpgx-h5h9
Vulnerability from github
Published
2024-05-17 15:31
Modified
2024-05-17 15:31
Details
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix NULL-deref on non-serdev setup
Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL.
Add the missing sanity check to prevent a NULL-pointer dereference when setup() is called for a non-serdev controller.
{
"affected": [],
"aliases": [
"CVE-2024-35850"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-17T15:15:21Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: fix NULL-deref on non-serdev setup\n\nQualcomm ROME controllers can be registered from the Bluetooth line\ndiscipline and in this case the HCI UART serdev pointer is NULL.\n\nAdd the missing sanity check to prevent a NULL-pointer dereference when\nsetup() is called for a non-serdev controller.",
"id": "GHSA-6x8f-vpgx-h5h9",
"modified": "2024-05-17T15:31:12Z",
"published": "2024-05-17T15:31:12Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35850"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/67459f1a707aae6d590454de07956c2752e21ea4"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7ddb9de6af0f1c71147785b12fd7c8ec3f06cc86"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/bec4d4c6fa5c6526409f582e4f31144e20c86c21"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading...