In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: SCO: Fix UAF on scosocktimeout
conn->sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn->sk is still valid by checking if it part of scosklist.
[
{
"deprecated": false,
"target": {
"file": "include/net/bluetooth/bluetooth.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"45528136600653661863437419047335005044",
"239194407715465482967796230851328767938",
"207752628883725371358959350353083062824",
"338376318892808048776460149048008126730"
]
},
"id": "CVE-2024-50125-0a6133d3",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80b05fbfa998480fb3d5299d93eab946f51e9c36",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_conn_del"
},
"digest": {
"length": 478.0,
"function_hash": "210826520601568225459103379733839122762"
},
"id": "CVE-2024-50125-1322753a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ddda5d967e84796e7df1b54a55f36b4b9f21079",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_sock_timeout"
},
"digest": {
"length": 491.0,
"function_hash": "82040058469122462598171076540987647308"
},
"id": "CVE-2024-50125-15ef2381",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80b05fbfa998480fb3d5299d93eab946f51e9c36",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_conn_del"
},
"digest": {
"length": 478.0,
"function_hash": "210826520601568225459103379733839122762"
},
"id": "CVE-2024-50125-1cf1dc72",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d30803f6a972b5b9e26d1d43b583c7ec151de04b",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_sock_timeout"
},
"digest": {
"length": 491.0,
"function_hash": "82040058469122462598171076540987647308"
},
"id": "CVE-2024-50125-1ef4cd6d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d30803f6a972b5b9e26d1d43b583c7ec151de04b",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"281149629530219833105441993362250656192",
"326944043989095346076672468351829817624",
"30861146143481355256164632884771363506",
"205074282697039244153811672885484437505",
"34742376416736394880074247135944542567",
"284128590322723742252705533847783076288",
"159615782050306271429914354630257968166",
"116255251023512284295933045306197386548",
"209742649267238582759589257942418978413",
"256683086682544710390702244395668235451",
"99093672349139345484384877462357234684",
"249480883934655497862427251669960256888",
"159615782050306271429914354630257968166",
"299478751611656126717088042412261873420",
"93825038638275445050476307419509523087"
]
},
"id": "CVE-2024-50125-24d6b497",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bf4470a3939c678fb822073e9ea77a0560bc6bb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_sock_timeout"
},
"digest": {
"length": 491.0,
"function_hash": "82040058469122462598171076540987647308"
},
"id": "CVE-2024-50125-520c8e79",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ddda5d967e84796e7df1b54a55f36b4b9f21079",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/af_bluetooth.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"3033914095706130694213417703826834678",
"42893972872941775331846864037553899387",
"249460000708274874634611825103870599374"
]
},
"id": "CVE-2024-50125-56f2d1b1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74a466a15731a754bcd8b5a83c126b5122e15a45",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_conn_del"
},
"digest": {
"length": 478.0,
"function_hash": "210826520601568225459103379733839122762"
},
"id": "CVE-2024-50125-5e2e83d1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80b05fbfa998480fb3d5299d93eab946f51e9c36",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/af_bluetooth.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"3033914095706130694213417703826834678",
"42893972872941775331846864037553899387",
"151313954458041992252395798220838710837"
]
},
"id": "CVE-2024-50125-640520f1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bf4470a3939c678fb822073e9ea77a0560bc6bb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"281149629530219833105441993362250656192",
"326944043989095346076672468351829817624",
"30861146143481355256164632884771363506",
"205074282697039244153811672885484437505",
"34742376416736394880074247135944542567",
"284128590322723742252705533847783076288",
"159615782050306271429914354630257968166",
"116255251023512284295933045306197386548",
"209742649267238582759589257942418978413",
"256683086682544710390702244395668235451",
"99093672349139345484384877462357234684",
"249480883934655497862427251669960256888",
"159615782050306271429914354630257968166",
"299478751611656126717088042412261873420",
"93825038638275445050476307419509523087"
]
},
"id": "CVE-2024-50125-6e4b04f8",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ddda5d967e84796e7df1b54a55f36b4b9f21079",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_sock_timeout"
},
"digest": {
"length": 491.0,
"function_hash": "82040058469122462598171076540987647308"
},
"id": "CVE-2024-50125-6f8417ef",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bf4470a3939c678fb822073e9ea77a0560bc6bb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/af_bluetooth.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"3033914095706130694213417703826834678",
"42893972872941775331846864037553899387",
"151313954458041992252395798220838710837"
]
},
"id": "CVE-2024-50125-75e9b7de",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80b05fbfa998480fb3d5299d93eab946f51e9c36",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "include/net/bluetooth/bluetooth.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"45528136600653661863437419047335005044",
"239194407715465482967796230851328767938",
"207752628883725371358959350353083062824",
"338376318892808048776460149048008126730"
]
},
"id": "CVE-2024-50125-7c328e13",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bf4470a3939c678fb822073e9ea77a0560bc6bb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "include/net/bluetooth/bluetooth.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"45528136600653661863437419047335005044",
"239194407715465482967796230851328767938",
"207752628883725371358959350353083062824",
"338376318892808048776460149048008126730"
]
},
"id": "CVE-2024-50125-7f37496a",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ddda5d967e84796e7df1b54a55f36b4b9f21079",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/af_bluetooth.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"3033914095706130694213417703826834678",
"42893972872941775331846864037553899387",
"249460000708274874634611825103870599374"
]
},
"id": "CVE-2024-50125-8166b98c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ddda5d967e84796e7df1b54a55f36b4b9f21079",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/af_bluetooth.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"3033914095706130694213417703826834678",
"42893972872941775331846864037553899387",
"151313954458041992252395798220838710837"
]
},
"id": "CVE-2024-50125-a399db37",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d30803f6a972b5b9e26d1d43b583c7ec151de04b",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_conn_del"
},
"digest": {
"length": 478.0,
"function_hash": "210826520601568225459103379733839122762"
},
"id": "CVE-2024-50125-acb6bcb7",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bf4470a3939c678fb822073e9ea77a0560bc6bb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"281149629530219833105441993362250656192",
"326944043989095346076672468351829817624",
"30861146143481355256164632884771363506",
"205074282697039244153811672885484437505",
"34742376416736394880074247135944542567",
"284128590322723742252705533847783076288",
"159615782050306271429914354630257968166",
"116255251023512284295933045306197386548",
"209742649267238582759589257942418978413",
"256683086682544710390702244395668235451",
"99093672349139345484384877462357234684",
"249480883934655497862427251669960256888",
"159615782050306271429914354630257968166",
"299478751611656126717088042412261873420",
"93825038638275445050476307419509523087"
]
},
"id": "CVE-2024-50125-d362dbe2",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d30803f6a972b5b9e26d1d43b583c7ec151de04b",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"106500827078673202486681191762665976917",
"326944043989095346076672468351829817624",
"30861146143481355256164632884771363506",
"205074282697039244153811672885484437505",
"34742376416736394880074247135944542567",
"284128590322723742252705533847783076288",
"159615782050306271429914354630257968166",
"116255251023512284295933045306197386548",
"209742649267238582759589257942418978413",
"256683086682544710390702244395668235451",
"99093672349139345484384877462357234684",
"249480883934655497862427251669960256888",
"159615782050306271429914354630257968166",
"299478751611656126717088042412261873420",
"93825038638275445050476307419509523087"
]
},
"id": "CVE-2024-50125-e90fd4ae",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74a466a15731a754bcd8b5a83c126b5122e15a45",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "include/net/bluetooth/bluetooth.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"45528136600653661863437419047335005044",
"253957754618369008944752345830767633817",
"331707107902270621084245660375942855249",
"214815722930129603151421035529731174150"
]
},
"id": "CVE-2024-50125-ec69320b",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74a466a15731a754bcd8b5a83c126b5122e15a45",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_sock_timeout"
},
"digest": {
"length": 491.0,
"function_hash": "82040058469122462598171076540987647308"
},
"id": "CVE-2024-50125-f225383c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74a466a15731a754bcd8b5a83c126b5122e15a45",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c",
"function": "sco_conn_del"
},
"digest": {
"length": 478.0,
"function_hash": "210826520601568225459103379733839122762"
},
"id": "CVE-2024-50125-f9564f3e",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74a466a15731a754bcd8b5a83c126b5122e15a45",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/bluetooth/sco.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"281149629530219833105441993362250656192",
"326944043989095346076672468351829817624",
"30861146143481355256164632884771363506",
"205074282697039244153811672885484437505",
"34742376416736394880074247135944542567",
"284128590322723742252705533847783076288",
"159615782050306271429914354630257968166",
"116255251023512284295933045306197386548",
"209742649267238582759589257942418978413",
"256683086682544710390702244395668235451",
"99093672349139345484384877462357234684",
"249480883934655497862427251669960256888",
"159615782050306271429914354630257968166",
"299478751611656126717088042412261873420",
"93825038638275445050476307419509523087"
]
},
"id": "CVE-2024-50125-fa8ac407",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80b05fbfa998480fb3d5299d93eab946f51e9c36",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "include/net/bluetooth/bluetooth.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"45528136600653661863437419047335005044",
"239194407715465482967796230851328767938",
"207752628883725371358959350353083062824",
"338376318892808048776460149048008126730"
]
},
"id": "CVE-2024-50125-fb11a7c1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d30803f6a972b5b9e26d1d43b583c7ec151de04b",
"signature_version": "v1"
}
]