CVE-2024-21803
Possible UAF in bt_accept_poll in Linux kernel
- State
- Published
- Severity
- 3.5 Low
- Published
- Jan 30, 2024
- Updated
- May 29, 2025
- Reserved
- Jan 15, 2024
Description
Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.
This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L | Anolis |
Weaknesses
- CWE-416 Use After Free
Affected Products
| Product | Versions |
|---|---|
Linux kernelLinux |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.