CVE-2024-35856
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-35856
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35856.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-35856
- Downstream
- Related
- Published
- 2024-05-17T14:47:32.088Z
- Modified
- 2025-11-20T04:04:44.647469Z
- Summary
- Bluetooth: btusb: mediatek: Fix double free of skb in coredump
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: mediatek: Fix double free of skb in coredump
hcidevcdappend() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb.
Reported-by : Dan Carpenter dan.carpenter@linaro.org
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0b70151328781a89c89e4cf3fae21fc0e98d869eFixed80dfef128cb9f1b1ef67c0fe8c8deb4ea7ad30c1
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0b70151328781a89c89e4cf3fae21fc0e98d869eFixede20093c741d8da9f6390dd45d75b779861547035
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0b70151328781a89c89e4cf3fae21fc0e98d869eFixed18bdb386a1a30e7a3d7732a98e45e69cf6b5710d
Affected versions
v6.*
v6.5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btmtk.c",
"function": "btmtk_process_coredump"
},
"digest": {
"length": 894.0,
"function_hash": "167491233972122596975170984746471176092"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e20093c741d8da9f6390dd45d75b779861547035",
"signature_version": "v1",
"id": "CVE-2024-35856-6d397f89"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btmtk.c"
},
"digest": {
"line_hashes": [
"257026897179810609471603246677841204048",
"120018272215905351038007251156172014690",
"77121306719916448159973458892157865658",
"327145749454381542024999725529690378651",
"79146112078888588228286415527184244948",
"317911324474591740382344956979140679141",
"20963963886644094772942596869028529991",
"221304876180199052643807829392797555785",
"61516433550441046678099860526007454620",
"225076638790688569981113145801372940203"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18bdb386a1a30e7a3d7732a98e45e69cf6b5710d",
"signature_version": "v1",
"id": "CVE-2024-35856-7b4faa72"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btmtk.c",
"function": "btmtk_process_coredump"
},
"digest": {
"length": 894.0,
"function_hash": "167491233972122596975170984746471176092"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18bdb386a1a30e7a3d7732a98e45e69cf6b5710d",
"signature_version": "v1",
"id": "CVE-2024-35856-a6718b10"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btmtk.c"
},
"digest": {
"line_hashes": [
"257026897179810609471603246677841204048",
"120018272215905351038007251156172014690",
"77121306719916448159973458892157865658",
"327145749454381542024999725529690378651",
"79146112078888588228286415527184244948",
"317911324474591740382344956979140679141",
"20963963886644094772942596869028529991",
"221304876180199052643807829392797555785",
"61516433550441046678099860526007454620",
"225076638790688569981113145801372940203"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e20093c741d8da9f6390dd45d75b779861547035",
"signature_version": "v1",
"id": "CVE-2024-35856-e1bbb9f8"
}
]