CVE-2024-36942

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36942
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

27 Feb 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : unknown
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: qca: corregir ruta de error de verificación de firmware Una confirmación reciente corrigió el código que analiza los archivos de firmware antes de descargarlos al controlador, pero introdujo una pérdida de memoria en caso de que las comprobaciones de cordura alguna vez fallaran. Asegúrese de liberar el búfer de firmware antes de regresar con errores.
Summary (en) In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix firmware check error path A recent commit fixed the code that parses the firmware files before downloading them to the controller but introduced a memory leak in case the sanity checks ever fail. Make sure to free the firmware buffer before returning on errors. (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
References
  • {'url': 'https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a', 'tags': ['Patch'], 'source': 'af854a3a-2127-422b-91ae-364da2661108'}
  • {'url': 'https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558', 'tags': ['Patch'], 'source': 'af854a3a-2127-422b-91ae-364da2661108'}
  • {'url': 'https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9', 'tags': ['Patch'], 'source': 'af854a3a-2127-422b-91ae-364da2661108'}
  • {'url': 'https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f', 'tags': ['Patch'], 'source': 'af854a3a-2127-422b-91ae-364da2661108'}
  • {'url': 'https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3', 'tags': ['Patch'], 'source': 'af854a3a-2127-422b-91ae-364da2661108'}

03 Feb 2025, 15:51

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a - () https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a - Patch
References () https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 - () https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 - Patch
References () https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 - () https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 - Patch
References () https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f - () https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f - Patch
References () https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 - () https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
CWE CWE-401

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a - () https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a -
References () https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 - () https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 -
References () https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 - () https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 -
References () https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f - () https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f -
References () https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 - () https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: qca: corregir ruta de error de verificación de firmware Una confirmación reciente corrigió el código que analiza los archivos de firmware antes de descargarlos al controlador, pero introdujo una pérdida de memoria en caso de que las comprobaciones de cordura alguna vez fallaran. Asegúrese de liberar el búfer de firmware antes de regresar con errores.

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-02-27 20:15

NVD link : CVE-2024-36942

Mitre link : CVE-2024-36942

CVE.ORG link : CVE-2024-36942

JSON object : View

Products Affected

No product.

CWE

No CWE.