CVE-2024-35964

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35964
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 Patch
https://git.kernel.org/stable/c/6a6baa1ee7a9df33adbf932305053520b9741b35 Patch
https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e Patch
https://git.kernel.org/stable/c/cec736e60dc18d91b88af28d96664bff284b02d1 Patch
https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 Patch
https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

03 Nov 2025, 22:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

24 Sep 2025, 18:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 - () https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 - Patch
References () https://git.kernel.org/stable/c/6a6baa1ee7a9df33adbf932305053520b9741b35 - () https://git.kernel.org/stable/c/6a6baa1ee7a9df33adbf932305053520b9741b35 - Patch
References () https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e - () https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e - Patch
References () https://git.kernel.org/stable/c/cec736e60dc18d91b88af28d96664bff284b02d1 - () https://git.kernel.org/stable/c/cec736e60dc18d91b88af28d96664bff284b02d1 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
First Time Linux linux Kernel
Linux
CWE CWE-1284
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*

02 Dec 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/cec736e60dc18d91b88af28d96664bff284b02d1 -

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 - () https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12 -
References () https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e - () https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e -

10 Oct 2024, 12:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/6a6baa1ee7a9df33adbf932305053520b9741b35 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: ISO: Corrección al no validar la entrada del usuario setsockopt. Verifique la longitud de la entrada del usuario antes de copiar datos.

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-11-03 22:16

NVD link : CVE-2024-35964

Mitre link : CVE-2024-35964

CVE.ORG link : CVE-2024-35964

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-1284

Improper Validation of Specified Quantity in Input