In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: SCO: Fix not validating setsockopt user input
syzbot reported sco_sock_setsockopt() is copying data without checking user input length.
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | May 20, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-devel | Jun 13, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1070-nvidia-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-128-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-raspiUpgrade linux-image-5.4.0-1136-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1072-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1073-oracleUpgrade linux-image-5.15.0-1041-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1075-awsUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-128-lowlatencyUpgrade linux-image-5.4.0-1056-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1097-bluefieldUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.4.0-204-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1137-awsUpgrade linux-image-5.4.0-204-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1084-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1074-gcpUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1076-awsUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1072-oracleUpgrade linux-image-oemUpgrade linux-image-5.15.0-130-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-204-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1071-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1070-nvidiaUpgrade linux-image-5.4.0-1121-raspiUpgrade linux-image-5.15.0-130-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1057-gkeopUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1125-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1141-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1067-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-130-generic-64kUpgrade linux-image-azure-lts-22.04 | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub