CVE-2024-26889

Bluetooth: hci_core: Fix possible buffer overflow

State: Published
Severity: 5.5 Medium
Published: Apr 17, 2024
Updated: Oct 30, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_core: Fix possible buffer overflow

struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
LinuxLinux	194ab82c1ea187512ff2f822124bd05b63fc9f76 to before 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8acAffected b48595f5b1c6e81e06e164e7d2b7a30b1776161e to before 54a03e4ac1a41edf8a5087bd59f8241b0de96d3dAffected ffb060b136dd75a033ced0fc0aed2882c02e8b56 to before d47e6c1932cee02954ea588c9f09fd5ecefeadfcAffected bbec1724519ecd9c468d1186a8f30b7567175bfb to before 2e845867b4e279eff0a19ade253390470e07e8a1Affected a55d53ad5c86aee3f6da50ee73626008997673fa to before 0477ac14251d0ba813f311bb5db79eb07d99bfccAffected dcda165706b9fbfd685898d46a6749d7d397e0c0 to before a41c8efe659caed0e21422876bbb6b73c15b5244Affected dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 8c28598a2c29201d2ba7fc37539a7d41c264fb10Affected dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 2edce8e9a99dd5e4404259d52e754fdc97fb42c2Affected dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 81137162bfaa7278785b24c1fd2e9e74f082e8e4Affected d9ce7d438366431e5688be98d8680336ce0a0f8dAffected 5558f4312dca43cebfb9a1aab3d632be91bbb736Affected 4.19.297 to before 4.19.311Affected 5.4.259 to before 5.4.273Affected 5.10.199 to before 5.10.214Affected 5.15.137 to before 5.15.153Affected 6.1.60 to before 6.1.191Affected 4.14.328 to before 4.15Affected 6.5.9 to before 6.6Affected
LinuxLinux	6.6Affected before 6.6Not affected 4.19.311 through 4.19.Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

194ab82c1ea187512ff2f822124bd05b63fc9f76 to before 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8acAffected
b48595f5b1c6e81e06e164e7d2b7a30b1776161e to before 54a03e4ac1a41edf8a5087bd59f8241b0de96d3dAffected
ffb060b136dd75a033ced0fc0aed2882c02e8b56 to before d47e6c1932cee02954ea588c9f09fd5ecefeadfcAffected
bbec1724519ecd9c468d1186a8f30b7567175bfb to before 2e845867b4e279eff0a19ade253390470e07e8a1Affected
a55d53ad5c86aee3f6da50ee73626008997673fa to before 0477ac14251d0ba813f311bb5db79eb07d99bfccAffected
dcda165706b9fbfd685898d46a6749d7d397e0c0 to before a41c8efe659caed0e21422876bbb6b73c15b5244Affected
dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 8c28598a2c29201d2ba7fc37539a7d41c264fb10Affected
dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 2edce8e9a99dd5e4404259d52e754fdc97fb42c2Affected
dcda165706b9fbfd685898d46a6749d7d397e0c0 to before 81137162bfaa7278785b24c1fd2e9e74f082e8e4Affected
d9ce7d438366431e5688be98d8680336ce0a0f8dAffected
5558f4312dca43cebfb9a1aab3d632be91bbb736Affected
4.19.297 to before 4.19.311Affected
5.4.259 to before 5.4.273Affected
5.10.199 to before 5.10.214Affected
5.15.137 to before 5.15.153Affected
6.1.60 to before 6.1.191Affected
4.14.328 to before 4.15Affected
6.5.9 to before 6.6Affected

LinuxLinux

6.6Affected
before 6.6Not affected
4.19.311 through 4.19.*Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.