CVE-2024-35963

Bluetooth: hci_sock: Fix not validating setsockopt user input

State: Published
Severity: 7.1 High
Published: May 20, 2024
Updated: Aug 5, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sock: Fix not validating setsockopt user input

Check user input length before copying data.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	09572fca7223bcf32c9f0d5e100d8381a81d55f4 to before 781f3a97a38a338bc893b6db7f9f9670bf1a9e37Affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 to before 0c18a64039aa3f1c16f208d197c65076da798137Affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 to before 50173882bb187e70e37bac01385b9b114019bee2Affected 09572fca7223bcf32c9f0d5e100d8381a81d55f4 to before b2186061d6043d6345a97100460363e990af0d46Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.8.7 through 6.8.*Not affected 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.