Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-35850

Bluetooth: qca: fix NULL-deref on non-serdev setup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev setup Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL. Add the missing sanity check to prevent a NULL-pointer dereference when setup() is called for a non-serdev controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e9b3e5b8c65733f626a7ee919c4bc895b51d7bb2 to < 67459f1a707aae6d590454de07956c2752e21ea4affected
  • e9b3e5b8c65733f626a7ee919c4bc895b51d7bb2 to < bec4d4c6fa5c6526409f582e4f31144e20c86c21affected
  • e9b3e5b8c65733f626a7ee919c4bc895b51d7bb2 to < 7ddb9de6af0f1c71147785b12fd7c8ec3f06cc86affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.30 to ≤ 6.6.*unaffected
  • 6.8.9 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References