CVE-2024-35978

Bluetooth: Fix memory leak in hci_req_sync_complete()

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hci_req_sync_complete() In 'hci_req_sync_complete()', always free the previous sync request state before assigning reference to a new one.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/89a32741f4217856066c198a4a7267bcdd1edd67 patch
https://git.kernel.org/stable/c/4beab84fbb50df3be1d8f8a976e6fe882ca65cb2 patch
https://git.kernel.org/stable/c/8478394f76c748862ef179a16f651f752bdafaf0 patch
https://git.kernel.org/stable/c/75193678cce993aa959e7764b6df2f599886dd06 patch
https://git.kernel.org/stable/c/66fab1e120b39f8f47a94186ddee36006fc02ca8 patch
https://git.kernel.org/stable/c/9ab5e44b9bac946bd49fd63264a08cd1ea494e76 patch
https://git.kernel.org/stable/c/e4cb8382fff6706436b66eafd9c0ee857ff0a9f5 patch
https://git.kernel.org/stable/c/45d355a926ab40f3ae7bc0b0a00cb0e3e8a5a810 patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Frequently Asked Questions

What is the severity of CVE-2024-35978?
CVE-2024-35978 has been scored as a medium severity vulnerability.
How to fix CVE-2024-35978?
To fix CVE-2024-35978, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-35978 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-35978 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-35978?
CVE-2024-35978 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.