CVE-2024-36011

Bluetooth: HCI: Fix potential null-ptr-deref

State: Published
Severity: 5.5 Medium
Published: May 23, 2024
Updated: May 23, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: HCI: Fix potential null-ptr-deref

Fix potential null-ptr-deref in hci_le_big_sync_established_evt().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	f777d88278170410b06a1f6633f3b9375a4ddd6b to before 1f7ebb69c1d65732bcac2fda9d15421f76f01e81Affected f777d88278170410b06a1f6633f3b9375a4ddd6b to before 9f3be61f55d4eedc20eedc56c0f04a5ce2b4a55aAffected f777d88278170410b06a1f6633f3b9375a4ddd6b to before d2706004a1b8b526592e823d7e52551b518a7941Affected 970aaee1d264ff8b6907005f47b8724ad45f1e48Affected 993fffbcc6164a9b9b6446f21f3caa649e3c7346Affected 6.4.16 to before 6.5Affected 6.5.3 to before 6.6Affected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.31 through 6.6.Not affected 6.8.10 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

f777d88278170410b06a1f6633f3b9375a4ddd6b to before 1f7ebb69c1d65732bcac2fda9d15421f76f01e81Affected
f777d88278170410b06a1f6633f3b9375a4ddd6b to before 9f3be61f55d4eedc20eedc56c0f04a5ce2b4a55aAffected
f777d88278170410b06a1f6633f3b9375a4ddd6b to before d2706004a1b8b526592e823d7e52551b518a7941Affected
970aaee1d264ff8b6907005f47b8724ad45f1e48Affected
993fffbcc6164a9b9b6446f21f3caa649e3c7346Affected
6.4.16 to before 6.5Affected
6.5.3 to before 6.6Affected

LinuxLinux

6.6Affected
before 6.6Not affected
6.6.31 through 6.6.*Not affected
6.8.10 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.