CVE-2024-35933

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-35933
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35933.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-35933
Downstream
Related
Published
2024-05-19T10:10:41Z
Modified
2026-08-12T03:30:52Z
Summary
Bluetooth: btintel: Fix null ptr deref in btintel_read_version
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: Fix null ptr deref in btintel_read_version

If hci_cmd_sync_complete() is triggered and skb is NULL, then hdev->req_skb is NULL, which will cause this issue.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35933.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
abfeea476c68afea54c9c050a2d3b19d5d2ee873
Fixed
b19fe5eea619d54eea59bb8a37c0f8d00ef0e912
Fixed
ffdca0a62abaf8c41d8d9ea132000fd808de329b
Fixed
22d3053ef05f0b5045e45bd91e7473846261d65e
Fixed
b79e040910101b020931ba0c9a6b77e81ab7f645

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35933.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
6.1.86
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.27
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35933.json"