In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: Fix not validating setsockopt user input
syzbot reported rfcomm_sock_setsockopt_old() is copying data without checking user input length.
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt_old net/bluetooth/rfcomm/sock.c:632 [inline] BUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt+0x893/0xa70 net/bluetooth/rfcomm/sock.c:673 Read of size 4 at addr ffff8880209a8bc3 by task syz-executor632/5064
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo | Feb 26, 2025 | May 20, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | May 20, 2024 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optional | Jun 13, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-130-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1084-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-128-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1070-raspiUpgrade linux-image-5.4.0-204-genericUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.15.0-1073-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1097-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-5.15.0-1070-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1041-xilinx-zynqmpUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1125-kvmUpgrade linux-image-5.4.0-1121-raspiUpgrade linux-image-5.15.0-1074-gcpUpgrade linux-image-5.4.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-130-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1076-awsUpgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1075-awsUpgrade linux-image-5.15.0-128-lowlatency-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1136-oracleUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-204-lowlatencyUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.4.0-1141-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-204-generic-lpaeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1071-kvmUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-ibmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1057-gkeopUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.4.0-1137-awsUpgrade linux-image-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-130-genericUpgrade linux-image-6.8.0-1008-oem | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub