In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: SCO: Fix not validating setsockopt user input
syzbot reported sco_sock_setsockopt() is copying data without checking user input length.
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dtb-socionext | Jun 13, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1067-ibmUpgrade linux-image-5.15.0-130-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-204-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.4.0-1141-gcpUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1071-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1084-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-oracleUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-130-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-1076-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.4.0-1125-kvmUpgrade linux-image-5.15.0-1074-gcpUpgrade linux-image-5.15.0-130-generic-lpaeUpgrade linux-image-5.4.0-1121-raspiUpgrade linux-image-5.15.0-1070-nvidiaUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1075-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-204-generic-lpaeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1136-oracleUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-204-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1073-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-gkeUpgrade linux-image-5.4.0-1056-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1041-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1070-raspiUpgrade linux-image-5.15.0-128-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1070-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1097-bluefieldUpgrade linux-image-raspiUpgrade linux-image-5.15.0-128-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.4.0-1137-aws | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub