Beveiligingsadvies

CVE-2024-36880

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-30 15:28:51
Laatst bijgewerkt 2026-08-05 11:31:47
Toegewezen door Linux
CVSS-score 7.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.