PT-2024-26804 · Linux+6 · Linux Kernel+6

Luiz Augusto Von Dentz

·

Published

2024-04-05

·

Updated

2025-09-29

·

CVE-2024-35963

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns a lack of validation for setsockopt user input in the Linux kernel's Bluetooth functionality, specifically in hci sock. This could potentially allow for unauthorized data copying if user input length is not properly checked before data is copied.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1284CWE-20

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-06407
CVE-2024-35963
DLA-4008-1
INFSA-2025_6966
RHSA-2025:6966
RHSA-2025_6966
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6893-1
USN-6893-2
USN-6893-3
USN-6918-1
USN-7173-1
USN-7173-2
USN-7173-3
USN-7179-1
USN-7179-2
USN-7179-3
USN-7179-4
USN-7186-1
USN-7186-2
USN-7194-1
USN-7195-1
USN-7195-2
USN-7413-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu