In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: add missing firmware sanity checks
Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1caceadfb50432dbf6d808796cb6c34ebb6d662c",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-17631bb2",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267166996962361837534448452590611483826",
"158946310448016821266578909739935211866",
"168581280135855127578585050722603073371",
"216359638112317509387066282730510822448",
"142836974246723491570230032026369263209",
"318097630790837581568696065603315534427",
"123938448028867754877118170579828964154",
"156227317889973182053151444080540875466",
"118861619591298327955515126506288316592",
"43476969464518054638373243556420543581",
"198216440064151097650322662032392322030",
"5478259666506111843837666597243684335",
"226915904668674069861475296382870289377",
"7897793137861016497685721411061783655",
"202323054179794632847110967410871333576",
"222632924852474086493336113574318258708",
"229925363948025359491033538421033981856",
"269487424653971661935594036852322498791",
"28820231593530206315520209000188715702",
"28053897262221413162273455636555508957",
"218558421244089538029529268773124946249",
"324955651483812550941944091049861917422",
"320061044372434340676852565166548648287",
"316163928719060066726897001679887183746",
"81119146838409276808700060030249929878",
"249573642398886109419977281701119849875",
"131745234618885850502404417939931921671",
"299266022991019828929921085124099796127",
"164598968289239687179197358227339561360",
"131174595550808350548414797829272749266",
"49418072689301591805928688217716017232",
"123383700172660429373653359867582364587",
"263667250669017998822629573198211695490",
"41527551610881216757601092904032187984",
"288507163956030619035328963250019376447",
"162783219239152058452964130979898181145",
"330663447454174857481326218236406612728",
"83408433954504738558708831778555308257",
"323717099415274933434273474187491279421",
"22118310683522649151283290381042727517",
"11747527984483150279845005350791264672",
"288038510018257176679398975322162719391",
"99137964559611982033939966962483589787",
"181459719691160774049231659278991321408",
"68905909703296385783329187370021988431",
"249159778915093168391717862349894816553",
"77091284578337340604270116830765811839"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02f05ed44b71152d5e11d29be28aed91c0489b4e",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_download_firmware",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-2b35583c",
"signature_type": "Function",
"digest": {
"length": 1754.0,
"function_hash": "263259444595082473919162336516825427780"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed53949cc92e28aaa3463d246942bda1fbb7f307",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_tlv_check_data",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-347a8dd7",
"signature_type": "Function",
"digest": {
"length": 2486.0,
"function_hash": "12935530180721251775046643348859110201"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed53949cc92e28aaa3463d246942bda1fbb7f307",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-41209519",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267166996962361837534448452590611483826",
"158946310448016821266578909739935211866",
"168581280135855127578585050722603073371",
"216359638112317509387066282730510822448",
"142836974246723491570230032026369263209",
"318097630790837581568696065603315534427",
"123938448028867754877118170579828964154",
"156227317889973182053151444080540875466",
"118861619591298327955515126506288316592",
"43476969464518054638373243556420543581",
"198216440064151097650322662032392322030",
"5478259666506111843837666597243684335",
"226915904668674069861475296382870289377",
"7897793137861016497685721411061783655",
"202323054179794632847110967410871333576",
"222632924852474086493336113574318258708",
"229925363948025359491033538421033981856",
"269487424653971661935594036852322498791",
"28820231593530206315520209000188715702",
"28053897262221413162273455636555508957",
"218558421244089538029529268773124946249",
"324955651483812550941944091049861917422",
"320061044372434340676852565166548648287",
"316163928719060066726897001679887183746",
"81119146838409276808700060030249929878",
"249573642398886109419977281701119849875",
"131745234618885850502404417939931921671",
"299266022991019828929921085124099796127",
"164598968289239687179197358227339561360",
"131174595550808350548414797829272749266",
"49418072689301591805928688217716017232",
"123383700172660429373653359867582364587",
"263667250669017998822629573198211695490",
"41527551610881216757601092904032187984",
"288507163956030619035328963250019376447",
"162783219239152058452964130979898181145",
"330663447454174857481326218236406612728",
"83408433954504738558708831778555308257",
"323717099415274933434273474187491279421",
"22118310683522649151283290381042727517",
"11747527984483150279845005350791264672",
"288038510018257176679398975322162719391",
"99137964559611982033939966962483589787",
"181459719691160774049231659278991321408",
"68905909703296385783329187370021988431",
"249159778915093168391717862349894816553",
"77091284578337340604270116830765811839"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e4edfa1e2bd821a317e7d006517dcf2f3fac68d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-46e858d3",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267166996962361837534448452590611483826",
"158946310448016821266578909739935211866",
"168581280135855127578585050722603073371",
"216359638112317509387066282730510822448",
"142836974246723491570230032026369263209",
"318097630790837581568696065603315534427",
"123938448028867754877118170579828964154",
"156227317889973182053151444080540875466",
"118861619591298327955515126506288316592",
"43476969464518054638373243556420543581",
"198216440064151097650322662032392322030",
"5478259666506111843837666597243684335",
"226915904668674069861475296382870289377",
"7897793137861016497685721411061783655",
"202323054179794632847110967410871333576",
"222632924852474086493336113574318258708",
"229925363948025359491033538421033981856",
"269487424653971661935594036852322498791",
"28820231593530206315520209000188715702",
"28053897262221413162273455636555508957",
"218558421244089538029529268773124946249",
"324955651483812550941944091049861917422",
"320061044372434340676852565166548648287",
"316163928719060066726897001679887183746",
"81119146838409276808700060030249929878",
"249573642398886109419977281701119849875",
"131745234618885850502404417939931921671",
"299266022991019828929921085124099796127",
"164598968289239687179197358227339561360",
"131174595550808350548414797829272749266",
"49418072689301591805928688217716017232",
"123383700172660429373653359867582364587",
"263667250669017998822629573198211695490",
"41527551610881216757601092904032187984",
"288507163956030619035328963250019376447",
"162783219239152058452964130979898181145",
"330663447454174857481326218236406612728",
"83408433954504738558708831778555308257",
"323717099415274933434273474187491279421",
"22118310683522649151283290381042727517",
"11747527984483150279845005350791264672",
"288038510018257176679398975322162719391",
"99137964559611982033939966962483589787",
"181459719691160774049231659278991321408",
"68905909703296385783329187370021988431",
"249159778915093168391717862349894816553",
"77091284578337340604270116830765811839"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@427281f9498ed614f9aabc80e46ec077c487da6d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_download_firmware",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-48a92dc0",
"signature_type": "Function",
"digest": {
"length": 1754.0,
"function_hash": "263259444595082473919162336516825427780"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e4edfa1e2bd821a317e7d006517dcf2f3fac68d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_tlv_check_data",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-50577922",
"signature_type": "Function",
"digest": {
"length": 2486.0,
"function_hash": "12935530180721251775046643348859110201"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed53949cc92e28aaa3463d246942bda1fbb7f307",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_download_firmware",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-51efb764",
"signature_type": "Function",
"digest": {
"length": 1754.0,
"function_hash": "263259444595082473919162336516825427780"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@427281f9498ed614f9aabc80e46ec077c487da6d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-8d74e8bc",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267166996962361837534448452590611483826",
"158946310448016821266578909739935211866",
"168581280135855127578585050722603073371",
"216359638112317509387066282730510822448",
"142836974246723491570230032026369263209",
"318097630790837581568696065603315534427",
"123938448028867754877118170579828964154",
"156227317889973182053151444080540875466",
"118861619591298327955515126506288316592",
"43476969464518054638373243556420543581",
"198216440064151097650322662032392322030",
"5478259666506111843837666597243684335",
"226915904668674069861475296382870289377",
"7897793137861016497685721411061783655",
"202323054179794632847110967410871333576",
"222632924852474086493336113574318258708",
"229925363948025359491033538421033981856",
"269487424653971661935594036852322498791",
"28820231593530206315520209000188715702",
"28053897262221413162273455636555508957",
"218558421244089538029529268773124946249",
"324955651483812550941944091049861917422",
"320061044372434340676852565166548648287",
"316163928719060066726897001679887183746",
"81119146838409276808700060030249929878",
"249573642398886109419977281701119849875",
"131745234618885850502404417939931921671",
"299266022991019828929921085124099796127",
"164598968289239687179197358227339561360",
"131174595550808350548414797829272749266",
"49418072689301591805928688217716017232",
"123383700172660429373653359867582364587",
"263667250669017998822629573198211695490",
"41527551610881216757601092904032187984",
"288507163956030619035328963250019376447",
"162783219239152058452964130979898181145",
"330663447454174857481326218236406612728",
"83408433954504738558708831778555308257",
"323717099415274933434273474187491279421",
"22118310683522649151283290381042727517",
"11747527984483150279845005350791264672",
"288038510018257176679398975322162719391",
"99137964559611982033939966962483589787",
"181459719691160774049231659278991321408",
"68905909703296385783329187370021988431",
"249159778915093168391717862349894816553",
"77091284578337340604270116830765811839"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02f05ed44b71152d5e11d29be28aed91c0489b4e",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-90d48dc4",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267166996962361837534448452590611483826",
"158946310448016821266578909739935211866",
"168581280135855127578585050722603073371",
"216359638112317509387066282730510822448",
"142836974246723491570230032026369263209",
"318097630790837581568696065603315534427",
"123938448028867754877118170579828964154",
"156227317889973182053151444080540875466",
"118861619591298327955515126506288316592",
"43476969464518054638373243556420543581",
"198216440064151097650322662032392322030",
"5478259666506111843837666597243684335",
"226915904668674069861475296382870289377",
"7897793137861016497685721411061783655",
"202323054179794632847110967410871333576",
"222632924852474086493336113574318258708",
"229925363948025359491033538421033981856",
"269487424653971661935594036852322498791",
"28820231593530206315520209000188715702",
"28053897262221413162273455636555508957",
"218558421244089538029529268773124946249",
"324955651483812550941944091049861917422",
"320061044372434340676852565166548648287",
"316163928719060066726897001679887183746",
"81119146838409276808700060030249929878",
"249573642398886109419977281701119849875",
"131745234618885850502404417939931921671",
"299266022991019828929921085124099796127",
"164598968289239687179197358227339561360",
"131174595550808350548414797829272749266",
"49418072689301591805928688217716017232",
"123383700172660429373653359867582364587",
"263667250669017998822629573198211695490",
"41527551610881216757601092904032187984",
"288507163956030619035328963250019376447",
"162783219239152058452964130979898181145",
"330663447454174857481326218236406612728",
"83408433954504738558708831778555308257",
"323717099415274933434273474187491279421",
"22118310683522649151283290381042727517",
"11747527984483150279845005350791264672",
"288038510018257176679398975322162719391",
"99137964559611982033939966962483589787",
"181459719691160774049231659278991321408",
"68905909703296385783329187370021988431",
"249159778915093168391717862349894816553",
"77091284578337340604270116830765811839"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@427281f9498ed614f9aabc80e46ec077c487da6d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_tlv_check_data",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-9bd044fc",
"signature_type": "Function",
"digest": {
"length": 2486.0,
"function_hash": "12935530180721251775046643348859110201"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1caceadfb50432dbf6d808796cb6c34ebb6d662c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_download_firmware",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-bfbf7a72",
"signature_type": "Function",
"digest": {
"length": 1754.0,
"function_hash": "263259444595082473919162336516825427780"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e4edfa1e2bd821a317e7d006517dcf2f3fac68d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_download_firmware",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-ce08d00d",
"signature_type": "Function",
"digest": {
"length": 1754.0,
"function_hash": "263259444595082473919162336516825427780"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1caceadfb50432dbf6d808796cb6c34ebb6d662c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_tlv_check_data",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-d550754f",
"signature_type": "Function",
"digest": {
"length": 2486.0,
"function_hash": "12935530180721251775046643348859110201"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02f05ed44b71152d5e11d29be28aed91c0489b4e",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "qca_tlv_check_data",
"file": "drivers/bluetooth/btqca.c"
},
"id": "CVE-2024-36880-ec62b82a",
"signature_type": "Function",
"digest": {
"length": 2486.0,
"function_hash": "12935530180721251775046643348859110201"
}
}
]