CVE-2024-35963

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35963
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt user input Check user input length before copying data.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137 Patch
https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 Patch
https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37 Patch
https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 Patch
https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 Patch
https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

03 Nov 2025, 22:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

24 Sep 2025, 18:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137 - () https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137 - Patch
References () https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 - () https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 - Patch
References () https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37 - () https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37 - Patch
References () https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 - () https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE CWE-1284

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 - () https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2 -
References () https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 - () https://git.kernel.org/stable/c/b2186061d6043d6345a97100460363e990af0d46 -

17 Oct 2024, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/781f3a97a38a338bc893b6db7f9f9670bf1a9e37 -

10 Oct 2024, 12:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: hci_sock: solución que no valida la entrada del usuario setsockopt. Verifique la longitud de la entrada del usuario antes de copiar datos.

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-11-03 22:16

NVD link : CVE-2024-35963

Mitre link : CVE-2024-35963

CVE.ORG link : CVE-2024-35963

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-1284

Improper Validation of Specified Quantity in Input