In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcicore: Fix not checking skb length on hciacldata_packet
This fixes not checking if skb really contains an ACL header otherwise the code may attempt to access some uninitilized/invalid memory past the valid skb->data.
{ "vanir_signatures": [ { "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_acldata_packet" }, "signature_version": "v1", "digest": { "length": 666.0, "function_hash": "157897229584452346391834744147446745501" }, "id": "CVE-2024-56590-08243922", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@219960a48771b35a3857a491b955c31d6c33d581", "signature_type": "Function" }, { "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_acldata_packet" }, "signature_version": "v1", "digest": { "length": 748.0, "function_hash": "306288751477702725171772782347204248160" }, "id": "CVE-2024-56590-2b0b8a31", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe288a8214e7dd784d1f9b7c9e448244d316b47", "signature_type": "Function" }, { "target": { "file": "net/bluetooth/hci_core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "192986469514325852541666188380327033759", "315150346714733569147933267198729333471", "13691022777548832260508719741301470514", "53220961525739317910461980705577094449", "145483784129436941825102242204131723852", "63359726768188334356047633901573737858", "234981597042501287275073598963756907885", "266682140193425982861524811831377555954", "56737386054480556541324269520409868457", "262423800850158156156198129395603172752", "169301567871436656987014494533368791183", "337492146998535205852054865430985400595", "206360120919437636494904831327057990404", "312542359248956488375495080338189712424", "133414956279215096569469170485736714477" ] }, "id": "CVE-2024-56590-4862b911", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93a6160dc198ffe5786da8bd8588cfd17f53b29a", "signature_type": "Line" }, { "target": { "file": "net/bluetooth/hci_core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "192986469514325852541666188380327033759", "315150346714733569147933267198729333471", "13691022777548832260508719741301470514", "53220961525739317910461980705577094449", "145483784129436941825102242204131723852", "63359726768188334356047633901573737858", "234981597042501287275073598963756907885", "266682140193425982861524811831377555954", "56737386054480556541324269520409868457", "262423800850158156156198129395603172752", "169301567871436656987014494533368791183", "337492146998535205852054865430985400595", "206360120919437636494904831327057990404", "312542359248956488375495080338189712424", "133414956279215096569469170485736714477" ] }, "id": "CVE-2024-56590-5f08d9c0", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@559b1c7ac2e212a23b3833d3baf3bd957771d02e", "signature_type": "Line" }, { "target": { "file": "net/bluetooth/hci_core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "192986469514325852541666188380327033759", "315150346714733569147933267198729333471", "13691022777548832260508719741301470514", "53220961525739317910461980705577094449", "145483784129436941825102242204131723852", "63359726768188334356047633901573737858", "234981597042501287275073598963756907885", "266682140193425982861524811831377555954", "56737386054480556541324269520409868457", "262423800850158156156198129395603172752", "169301567871436656987014494533368791183", "337492146998535205852054865430985400595", "206360120919437636494904831327057990404", "312542359248956488375495080338189712424", "133414956279215096569469170485736714477" ] }, "id": "CVE-2024-56590-7016d051", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e50d12cc6e95e1fde08f5db6992b616f714b0fb", "signature_type": "Line" }, { "target": { "file": "net/bluetooth/hci_core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "192986469514325852541666188380327033759", "315150346714733569147933267198729333471", "13691022777548832260508719741301470514", "53220961525739317910461980705577094449", "145483784129436941825102242204131723852", "63359726768188334356047633901573737858", "234981597042501287275073598963756907885", "266682140193425982861524811831377555954", "56737386054480556541324269520409868457", "262423800850158156156198129395603172752", "169301567871436656987014494533368791183", "337492146998535205852054865430985400595", "206360120919437636494904831327057990404", "312542359248956488375495080338189712424", "133414956279215096569469170485736714477" ] }, "id": "CVE-2024-56590-8c9bc9b1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe288a8214e7dd784d1f9b7c9e448244d316b47", "signature_type": "Line" }, { "target": { "file": "net/bluetooth/hci_core.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "192986469514325852541666188380327033759", "315150346714733569147933267198729333471", "13691022777548832260508719741301470514", "53220961525739317910461980705577094449", "145483784129436941825102242204131723852", "63359726768188334356047633901573737858", "234981597042501287275073598963756907885", "266682140193425982861524811831377555954", "56737386054480556541324269520409868457", "262423800850158156156198129395603172752", "169301567871436656987014494533368791183", "337492146998535205852054865430985400595", "206360120919437636494904831327057990404", "312542359248956488375495080338189712424", "133414956279215096569469170485736714477" ] }, "id": "CVE-2024-56590-8ff51832", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@219960a48771b35a3857a491b955c31d6c33d581", "signature_type": "Line" }, { "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_acldata_packet" }, "signature_version": "v1", "digest": { "length": 666.0, "function_hash": "157897229584452346391834744147446745501" }, "id": "CVE-2024-56590-90bba7ec", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e50d12cc6e95e1fde08f5db6992b616f714b0fb", "signature_type": "Function" }, { "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_acldata_packet" }, "signature_version": "v1", "digest": { "length": 666.0, "function_hash": "157897229584452346391834744147446745501" }, "id": "CVE-2024-56590-a1f2fe24", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@559b1c7ac2e212a23b3833d3baf3bd957771d02e", "signature_type": "Function" }, { "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_acldata_packet" }, "signature_version": "v1", "digest": { "length": 666.0, "function_hash": "157897229584452346391834744147446745501" }, "id": "CVE-2024-56590-bd24cba8", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93a6160dc198ffe5786da8bd8588cfd17f53b29a", "signature_type": "Function" } ] }