CVE-2024-36880

Publication date

2024-05-30 15:28:51

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.