Riskcovery

CVE-2024-35856

Bluetooth: btusb: mediatek: Fix double free of skb in coredump

State
Published
Severity
8.8 High
Published
May 17, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: Fix double free of skb in coredump

hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb.

Reported-by : Dan Carpenter <dan.carpenter@linaro.org>

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0b70151328781a89c89e4cf3fae21fc0e98d869e to before 80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1Affected
  • 0b70151328781a89c89e4cf3fae21fc0e98d869e to before e20093c741d8da9f6390dd45d75b779861547035Affected
  • 0b70151328781a89c89e4cf3fae21fc0e98d869e to before 18bdb386a1a30e7a3d7732a98e45e69cf6b5710dAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.30 through 6.6.*Not affected
  • 6.8.9 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.