In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this checks if the conn->sk is still valid by checking if it part of sco_sk_list.
History

Thu, 19 Dec 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 08 Nov 2024 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-416
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.14.263:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.19.207:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10.67:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13.19:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.14.6:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4.148:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Wed, 06 Nov 2024 13:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Tue, 05 Nov 2024 17:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this checks if the conn->sk is still valid by checking if it part of sco_sk_list.
Title Bluetooth: SCO: Fix UAF on sco_sock_timeout
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-11-05T17:10:53.090Z

Updated: 2024-12-19T09:33:41.884Z

Reserved: 2024-10-21T19:36:19.954Z

Link: CVE-2024-50125

cve-icon Vulnrichment

Updated: 2024-12-11T14:25:56.511Z

cve-icon NVD

Status : Modified

Published: 2024-11-05T18:15:15.550

Modified: 2024-12-11T15:15:12.633

Link: CVE-2024-50125

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-11-05T00:00:00Z

Links: CVE-2024-50125 - Bugzilla