Orta CVSS 5.5

CVE-2024-26889: Linux Kernel: arabellek taşması

Yayın: 17 Nisan 2024 14:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,28 (yüzdelik 21)
CWE: CWE-120
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	4.14.328	—	4.15
linux-linux-kernel	4.19.297	—	4.19.311
linux-linux-kernel	5.4.259	—	5.4.273
linux-linux-kernel	5.10.199	—	5.10.214
linux-linux-kernel	5.15.137	—	5.15.153
linux-linux-kernel	6.1.60	—	6.1.83
linux-linux-kernel	6.5.9	—	6.6.23
linux-linux-kernel	6.7	—	6.7.11
linux-linux-kernel	6.8	—	6.8.2
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları