CVE-2024-21803
Possible UAF in bt_accept_poll in Linux kernel
En bref Sévérité LOW 3.5 EPSS EPSS 0.50 % · centile 42 (2026-10-27) État PUBLISHED Publiée 2024-01-30 Mise à jour 2025-05-29 Attribuée par Anolis Statut NVD Analyzed Description Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.
This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.
Scores Version Score Vecteur Évalué par CVSS 3.1 LOW 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L Anolis CVSS 3.1 LOW 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L NVD · security@openanolis.org (Secondary) CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 2.6.12.1 ≤ 6.6.8cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*Produits affectés
Références
Sources
