In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: SCO: Fix not validating setsockopt user input
syzbot reported sco_sock_setsockopt() is copying data without checking user input length.
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | May 20, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdso | Jun 13, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-130-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1071-kvmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.4.0-1084-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-130-genericUpgrade linux-image-5.4.0-1121-raspiUpgrade linux-image-5.15.0-1074-gcpUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-130-generic-lpaeUpgrade linux-image-5.15.0-1076-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1067-ibmUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-204-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.4.0-1141-gcpUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1072-oracleUpgrade linux-image-5.15.0-1057-gkeopUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1125-kvmUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1070-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1073-oracleUpgrade linux-image-5.15.0-1041-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1097-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-128-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-raspiUpgrade linux-image-5.15.0-128-lowlatencyUpgrade linux-image-5.15.0-1070-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-204-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1075-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1137-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-awsUpgrade linux-image-5.4.0-204-generic-lpaeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1136-oracleUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1072-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1056-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04 | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub