Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-26889

Bluetooth: hci_core: Fix possible buffer overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 194ab82c1ea187512ff2f822124bd05b63fc9f76 to < 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8acaffected
  • b48595f5b1c6e81e06e164e7d2b7a30b1776161e to < 54a03e4ac1a41edf8a5087bd59f8241b0de96d3daffected
  • ffb060b136dd75a033ced0fc0aed2882c02e8b56 to < d47e6c1932cee02954ea588c9f09fd5ecefeadfcaffected
  • bbec1724519ecd9c468d1186a8f30b7567175bfb to < 2e845867b4e279eff0a19ade253390470e07e8a1affected
  • a55d53ad5c86aee3f6da50ee73626008997673fa to < 0477ac14251d0ba813f311bb5db79eb07d99bfccaffected
  • dcda165706b9fbfd685898d46a6749d7d397e0c0 to < a41c8efe659caed0e21422876bbb6b73c15b5244affected
  • dcda165706b9fbfd685898d46a6749d7d397e0c0 to < 8c28598a2c29201d2ba7fc37539a7d41c264fb10affected
  • dcda165706b9fbfd685898d46a6749d7d397e0c0 to < 2edce8e9a99dd5e4404259d52e754fdc97fb42c2affected
  • dcda165706b9fbfd685898d46a6749d7d397e0c0 to < 81137162bfaa7278785b24c1fd2e9e74f082e8e4affected
  • d9ce7d438366431e5688be98d8680336ce0a0f8daffected
  • 5558f4312dca43cebfb9a1aab3d632be91bbb736affected
  • 4.19.297 to < 4.19.311affected
  • 5.4.259 to < 5.4.273affected
  • 5.10.199 to < 5.10.214affected
  • 5.15.137 to < 5.15.153affected
  • 6.1.60 to < 6.1.191affected
  • 4.14.328 to < 4.15affected
  • 6.5.9 to < 6.6affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 4.19.311 to ≤ 4.19.*unaffected
  • 5.4.273 to ≤ 5.4.*unaffected
  • 5.10.214 to ≤ 5.10.*unaffected
  • 5.15.153 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.23 to ≤ 6.6.*unaffected
  • 6.7.11 to ≤ 6.7.*unaffected
  • 6.8.2 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References