In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: SCO: Fix not validating setsockopt user input
syzbot reported sco_sock_setsockopt() is copying data without checking user input length.
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdump | Jun 13, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1084-ibmUpgrade linux-image-5.15.0-1076-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1121-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1057-gkeopUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-130-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1071-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.15.0-130-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1067-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.4.0-204-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1074-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-130-generic-64kUpgrade linux-image-oemUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-1125-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1070-nvidiaUpgrade linux-image-5.4.0-1141-gcpUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1072-oracleUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1075-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-128-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1097-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-204-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1041-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-gkeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1056-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1073-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1137-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-204-generic-lpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-5.4.0-1136-oracleUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1070-raspiUpgrade linux-image-5.15.0-128-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1070-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04 | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub