CVE-2024-35965

Bluetooth: L2CAP: Fix not validating setsockopt user input

State: Published
Severity: Not scored
Published: May 20, 2024
Updated: Oct 15, 2026
Reserved: May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: Fix not validating setsockopt user input

Check user input length before copying data.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	33575df7be6748292f88453f29319af6d639c5c8 to before f13b04cf65a86507ff15a9bbf37969d25be3e2a0Affected 33575df7be6748292f88453f29319af6d639c5c8 to before 9d42f373391211c7c8af66a3a316533a32b8a607Affected 33575df7be6748292f88453f29319af6d639c5c8 to before 28234f8ab69c522ba447f3e041bbfbb284c5959aAffected 33575df7be6748292f88453f29319af6d639c5c8 to before 8ee0c132a61df9723813c40e742dc5321824daa9Affected 33575df7be6748292f88453f29319af6d639c5c8 to before 4f3951242ace5efc7131932e2e01e6ac6baed846Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 5.10.227 through 5.10.Not affected 6.1.87 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.8.7 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

33575df7be6748292f88453f29319af6d639c5c8 to before f13b04cf65a86507ff15a9bbf37969d25be3e2a0Affected
33575df7be6748292f88453f29319af6d639c5c8 to before 9d42f373391211c7c8af66a3a316533a32b8a607Affected
33575df7be6748292f88453f29319af6d639c5c8 to before 28234f8ab69c522ba447f3e041bbfbb284c5959aAffected
33575df7be6748292f88453f29319af6d639c5c8 to before 8ee0c132a61df9723813c40e742dc5321824daa9Affected
33575df7be6748292f88453f29319af6d639c5c8 to before 4f3951242ace5efc7131932e2e01e6ac6baed846Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
5.10.227 through 5.10.*Not affected
6.1.87 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.8.7 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.