In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix info leak when fetching board id
Add the missing sanity check when fetching the board id to avoid leaking slab data when later requesting the firmware.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtual | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub