CVE-2024-36033

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching board id Add the missing sanity check when fetching the board id to avoid leaking slab data when later requesting the firmware.

Score

CVSS 3.1 7.1 High

Status

Analyzed - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2024-05-30

Last modified

2026-05-11

Weaknesses

CWE-668

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197
• https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd
• https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209
• https://git.kernel.org/stable/c/bcccdc947d2ca5972b1e92d0dea10803ddc08ceb
• https://git.kernel.org/stable/c/f30c37cb4549baf8377434892d520fe7769bdba7