NetSight
IP …
medium5.5

CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name…

Impact

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14.328 before 4.15
from 4.19.297 before 4.19.311
from 5.4.259 before 5.4.273
from 5.10.199 before 5.10.214
from 5.15.137 before 5.15.153
from 6.1.60 before 6.1.83
DebianDebian Linux
Version 10.0

Weakness classification

CWE-120

References