Riskcovery

CVE-2024-50125

Bluetooth: SCO: Fix UAF on sco_sock_timeout

State
Published
Severity
8.0 High
Published
Nov 5, 2024
Updated
Aug 19, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: SCO: Fix UAF on sco_sock_timeout

conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this checks if the conn->sk is still valid by checking if it part of sco_sk_list.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • a1073aad497d0d071a71f61b721966a176d50c08 to before 678386459ffc07d2fbfbfe33456013786975cfefAffected
  • ba316be1b6a00db7126ed9a39f9bee434a508043 to before 74a466a15731a754bcd8b5a83c126b5122e15a45Affected
  • ba316be1b6a00db7126ed9a39f9bee434a508043 to before 9ddda5d967e84796e7df1b54a55f36b4b9f21079Affected
  • ba316be1b6a00db7126ed9a39f9bee434a508043 to before d30803f6a972b5b9e26d1d43b583c7ec151de04bAffected
  • ba316be1b6a00db7126ed9a39f9bee434a508043 to before 80b05fbfa998480fb3d5299d93eab946f51e9c36Affected
  • ba316be1b6a00db7126ed9a39f9bee434a508043 to before 1bf4470a3939c678fb822073e9ea77a0560bc6bbAffected
  • fea63ccd928c01573306983346588b26cffb5572Affected
  • 48669c81a65628ef234cbdd91b9395952c7c27feAffected
  • 37d7ae2b0578f2373674a755402ee722e96edc08Affected
  • ec1f74319bb35c1c90c25014ec0f6ea6c3ca2134Affected
  • b657bba82ff6a007d84fd076bd73b11131726a2bAffected
  • 5.10.67 to before 5.10.265Affected
  • 4.14.263 to before 4.15Affected
  • 4.19.207 to before 4.20Affected
  • 5.4.148 to before 5.5Affected
  • 5.13.19 to before 5.14Affected
  • 5.14.6 to before 5.15Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.10.265 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.115 through 6.1.*Not affected
  • 6.6.59 through 6.6.*Not affected
  • 6.11.6 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.