In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcicore: Fix not checking skb length on hciacldata_packet
This fixes not checking if skb really contains an ACL header otherwise the code may attempt to access some uninitilized/invalid memory past the valid skb->data.
[
{
"id": "CVE-2024-56590-08243922",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_acldata_packet"
},
"digest": {
"length": 666.0,
"function_hash": "157897229584452346391834744147446745501"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@219960a48771b35a3857a491b955c31d6c33d581",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-2b0b8a31",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_acldata_packet"
},
"digest": {
"length": 748.0,
"function_hash": "306288751477702725171772782347204248160"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe288a8214e7dd784d1f9b7c9e448244d316b47",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-4862b911",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"192986469514325852541666188380327033759",
"315150346714733569147933267198729333471",
"13691022777548832260508719741301470514",
"53220961525739317910461980705577094449",
"145483784129436941825102242204131723852",
"63359726768188334356047633901573737858",
"234981597042501287275073598963756907885",
"266682140193425982861524811831377555954",
"56737386054480556541324269520409868457",
"262423800850158156156198129395603172752",
"169301567871436656987014494533368791183",
"337492146998535205852054865430985400595",
"206360120919437636494904831327057990404",
"312542359248956488375495080338189712424",
"133414956279215096569469170485736714477"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93a6160dc198ffe5786da8bd8588cfd17f53b29a",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-7016d051",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"192986469514325852541666188380327033759",
"315150346714733569147933267198729333471",
"13691022777548832260508719741301470514",
"53220961525739317910461980705577094449",
"145483784129436941825102242204131723852",
"63359726768188334356047633901573737858",
"234981597042501287275073598963756907885",
"266682140193425982861524811831377555954",
"56737386054480556541324269520409868457",
"262423800850158156156198129395603172752",
"169301567871436656987014494533368791183",
"337492146998535205852054865430985400595",
"206360120919437636494904831327057990404",
"312542359248956488375495080338189712424",
"133414956279215096569469170485736714477"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e50d12cc6e95e1fde08f5db6992b616f714b0fb",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-8c9bc9b1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"192986469514325852541666188380327033759",
"315150346714733569147933267198729333471",
"13691022777548832260508719741301470514",
"53220961525739317910461980705577094449",
"145483784129436941825102242204131723852",
"63359726768188334356047633901573737858",
"234981597042501287275073598963756907885",
"266682140193425982861524811831377555954",
"56737386054480556541324269520409868457",
"262423800850158156156198129395603172752",
"169301567871436656987014494533368791183",
"337492146998535205852054865430985400595",
"206360120919437636494904831327057990404",
"312542359248956488375495080338189712424",
"133414956279215096569469170485736714477"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe288a8214e7dd784d1f9b7c9e448244d316b47",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-8ff51832",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"192986469514325852541666188380327033759",
"315150346714733569147933267198729333471",
"13691022777548832260508719741301470514",
"53220961525739317910461980705577094449",
"145483784129436941825102242204131723852",
"63359726768188334356047633901573737858",
"234981597042501287275073598963756907885",
"266682140193425982861524811831377555954",
"56737386054480556541324269520409868457",
"262423800850158156156198129395603172752",
"169301567871436656987014494533368791183",
"337492146998535205852054865430985400595",
"206360120919437636494904831327057990404",
"312542359248956488375495080338189712424",
"133414956279215096569469170485736714477"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@219960a48771b35a3857a491b955c31d6c33d581",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-90bba7ec",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_acldata_packet"
},
"digest": {
"length": 666.0,
"function_hash": "157897229584452346391834744147446745501"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e50d12cc6e95e1fde08f5db6992b616f714b0fb",
"signature_version": "v1"
},
{
"id": "CVE-2024-56590-bd24cba8",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_acldata_packet"
},
"digest": {
"length": 666.0,
"function_hash": "157897229584452346391834744147446745501"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93a6160dc198ffe5786da8bd8588cfd17f53b29a",
"signature_version": "v1"
}
]