CVE-2024-58009
Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc A NULL sock pointer is passed into l2cap_sock_alloc() when it is called
from l2cap_sock_new_connection_cb() and the error handling paths should
also be aware of it. Seemingly a more elegant solution would be to swap bt_sock_alloc() and
l2cap_chan_create() calls since they are not interdependent to that moment
but then l2cap_chan_create() adds the soon to be deallocated and still
dummy-initialized channel to the global list accessible by many L2CAP
paths. The channel would be removed from the list in short period of time
but be a bit more straight-forward here and just check for NULL instead of
changing the order of function calls. Found by Linux Verification Center (linuxtesting.org) with SVACE static
analysis tool.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2025-02-27 CVE Reserved
- 2025-02-27 CVE Published
- 2025-02-27 CVE Updated
- ---------- EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (12)
URL | Tag | Source |
---|---|---|
https://git.kernel.org/stable/c/bb2f2342a6ddf7c04f9aefbbfe86104cd138e629 | Vuln. Introduced | |
https://git.kernel.org/stable/c/8ad09ddc63ace3950ac43db6fbfe25b40f589dd6 | Vuln. Introduced | |
https://git.kernel.org/stable/c/61686abc2f3c2c67822aa23ce6f160467ec83d35 | Vuln. Introduced | |
https://git.kernel.org/stable/c/7c4f78cdb8e7501e9f92d291a7d956591bf73be9 | Vuln. Introduced | |
https://git.kernel.org/stable/c/f6ad641646b67f29c7578dcd6c25813c7dcbf51e | Vuln. Introduced | |
https://git.kernel.org/stable/c/daa13175a6dea312a76099066cb4cbd4fc959a84 | Vuln. Introduced | |
https://git.kernel.org/stable/c/a8677028dd5123e5e525b8195483994d87123de4 | Vuln. Introduced |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.1.120 < 6.1.129 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.1.120 < 6.1.129" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.6.66 < 6.6.78 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.6.66 < 6.6.78" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.12.5 < 6.12.14 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.12.5 < 6.12.14" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.13 < 6.13.3 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.13 < 6.13.3" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.13 < 6.14-rc1 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.13 < 6.14-rc1" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.4.287 Search vendor "Linux" for product "Linux Kernel" and version "5.4.287" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.10.231 Search vendor "Linux" for product "Linux Kernel" and version "5.10.231" | en |
Affected
| ||||||
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 5.15.174 Search vendor "Linux" for product "Linux Kernel" and version "5.15.174" | en |
Affected
|