Skip to content
5.5 Medium

CVE-2024-26889 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow…

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Affected products and versions

Product Affected versions Fixed in
Linux 6.9 earliest → < 6.9 6.9
Linux 6.8 earliest → < 6.8.2 6.8.2
Linux 6.7 earliest → < 6.7.11 6.7.11
Linux 6.6 6.6.23
Linux 6.1 earliest → < 6.1.191 6.1.191
Linux 5.15 earliest → < 5.15.153 5.15.153
Linux 5.10 earliest → < 5.10.214 5.10.214
Linux 5.4 earliest → < 5.4.273 5.4.273
Linux 4.19 earliest → < 4.19.311 4.19.311
Show the other branch
Product Affected versions Fixed in
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1.1 1.1.1
The 18286 CVEs of Linux →
Track this CVE