vulnerability

Red Hat: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input (Multiple Advisories)

Name: Red Hat: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input (Multiple Advisories)
Creator: Red Hat
Published: 2024-05-20T00:00:00.000Z
Keywords: CVE, CWE-125, Red Hat, 2024, 35967, kernel, redhat-upgrade-kernel, redhat-upgrade-kernel-rt, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

May 20, 2024

Added

May 15, 2025

Modified

Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: SCO: Fix not validating setsockopt user input

syzbot reported sco_sock_setsockopt() is copying data without
checking user input length.

BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset
include/linux/sockptr.h:49 [inline]
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr
include/linux/sockptr.h:55 [inline]
BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90
net/bluetooth/sco.c:893
Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report