Security tracker / CVE-2024-26889

CVE-2024-26889

Bluetooth: hci_core: Fix possible buffer overflow

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in dcda165706b9 ("Bluetooth: hci_core: Fix build warnings").
 carnil> Vulnerable versions: 4.14.328 4.19.297 5.4.259 5.10.199 5.15.137 6.1.60 6.5.9
 carnil> 6.6-rc5.

Bugs

Status

Branch	Status
upstream	released (6.9-rc1) [81137162bfaa7278785b24c1fd2e9e74f082e8e4]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.8-upstream-stable	released (6.8.2) [2edce8e9a99dd5e4404259d52e754fdc97fb42c2]
6.7-upstream-stable	released (6.7.11) [8c28598a2c29201d2ba7fc37539a7d41c264fb10]
6.6-upstream-stable	released (6.6.23) [a41c8efe659caed0e21422876bbb6b73c15b5244]
6.1-upstream-stable	needed
5.10-upstream-stable	released (5.10.214) [d47e6c1932cee02954ea588c9f09fd5ecefeadfc]
4.19-upstream-stable	released (4.19.311) [6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac]
sid	released (6.7.12-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	released (5.10.216-1)
4.19-buster-security	released (4.19.316-1)