CVE-2024-57988: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btbcm: Fix NULL deref in btbcmgetboardname()
devmkstrdup() can return a NULL pointer on failure,but this returned value in btbcmgetboardname() is not checked. Add NULL check in btbcmgetboardname(), to handle kernel NULL pointer dereference error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57988?
CVE-2024-57988 has been classified as a medium severity vulnerability due to the potential for a NULL pointer dereference.
How do I fix CVE-2024-57988?
To fix CVE-2024-57988, update the Linux kernel to version 6.12.14 or higher, or 6.13.3 or higher.
Who is affected by CVE-2024-57988?
CVE-2024-57988 affects users of the Linux kernel versions between 6.9 and 6.12.13, and between 6.13 and 6.13.2.
What exploits are associated with CVE-2024-57988?
Currently, there are no known public exploits for CVE-2024-57988.
What software is impacted by CVE-2024-57988?
CVE-2024-57988 impacts the Linux kernel specifically in Bluetooth functionality through the btbcm_get_board_name() function.