CVE-2024-26889

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26889
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 Patch
https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 Patch
https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d Patch
https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac Patch
https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 Patch
https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 Patch
https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 Patch
https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc Patch
https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 Patch
https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 Patch
https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d Patch
https://git.kernel.org/stable/c/68644bf5ec6baaff40fc39b3529c874bfda709bd Patch
https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac Patch
https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 Patch
https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 Patch
https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 Patch
https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

21 Mar 2025, 14:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 - () https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 - Patch
References () https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 - () https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 - Patch
References () https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d - () https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d - Patch
References () https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac - () https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac - Patch
References () https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 - () https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 - Patch
References () https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 - () https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 - Patch
References () https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 - () https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 - Patch
References () https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc - () https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc - Patch
References () https://git.kernel.org/stable/c/68644bf5ec6baaff40fc39b3529c874bfda709bd - () https://git.kernel.org/stable/c/68644bf5ec6baaff40fc39b3529c874bfda709bd - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Mailing List, Third Party Advisory
First Time Linux
Linux linux Kernel
Debian debian Linux
Debian
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

24 Jan 2025, 16:15

Type Values Removed Values Added
References
  • {'url': 'https://git.kernel.org/stable/c/4c69abb4d41ece30d9f4cfdf51cf3ee838f48723', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 - () https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1 -
References () https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 - () https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2 -
References () https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d - () https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d -
References () https://git.kernel.org/stable/c/68644bf5ec6baaff40fc39b3529c874bfda709bd - () https://git.kernel.org/stable/c/68644bf5ec6baaff40fc39b3529c874bfda709bd -
References () https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac - () https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac -
References () https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 - () https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4 -
References () https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 - () https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10 -
References () https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 - () https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244 -
References () https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc - () https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfc -

17 Nov 2024, 15:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/4c69abb4d41ece30d9f4cfdf51cf3ee838f48723 -

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

31 Oct 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-120

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 23:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: hci_core: soluciona un posible desbordamiento del búfer struct hci_dev_info tiene un campo de nombre de tamaño fijo[8], por lo que en caso de que hdev->name sea mayor que strcpy intentaría escribir más allá su tamaño, por lo que esto soluciona este problema cambiando al uso de strscpy.
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

17 Apr 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-17 11:15

Updated : 2025-03-21 14:35

NVD link : CVE-2024-26889

Mitre link : CVE-2024-26889

CVE.ORG link : CVE-2024-26889

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')