SecBoard
Zurück zur CVE-Übersicht

CVE-2024-50125

HIGH(8.0)

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk Signal Score20/100 — NIEDRIG
  • CVSS 8 — Hoch

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

8

Technische Schwere

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this checks if the conn->sk is still valid by checking if it part of sco_sk_list.

Betroffene Produkte

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:4.14.263:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:4.19.207:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.4.148:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.10.67:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.13.19:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.14.6:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*

Referenzen