Use After Free vulnerability in Linux Linux kernel kernel... · CVE-2024-21803 · GitHub Advisory Database · GitHub

Use After Free vulnerability in Linux Linux kernel kernel...

Low severity Unreviewed Published Jan 30, 2024 to the GitHub Advisory Database • Updated Jan 30, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.

This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.

References

Published by the National Vulnerability Database

Jan 30, 2024

Published to the GitHub Advisory Database Jan 30, 2024

Last updated Jan 30, 2024

Severity

Low

3.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

High

Privileges required

Low

User interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

Low

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L