Security tracker / CVE-2024-36880

CVE-2024-36880

Bluetooth: qca: add missing firmware sanity checks

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 83e81961ff7e ("Bluetooth: btqca: Introduce generic QCA ROME
 carnil> support"). Vulnerable versions: 4.3-rc1.

Bugs

Status

Branch	Status
upstream	released (6.9) [2e4edfa1e2bd821a317e7d006517dcf2f3fac68d]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.8-upstream-stable	released (6.8.10) [02f05ed44b71152d5e11d29be28aed91c0489b4e]
6.6-upstream-stable	released (6.6.31) [427281f9498ed614f9aabc80e46ec077c487da6d]
6.1-upstream-stable	released (6.1.91) [1caceadfb50432dbf6d808796cb6c34ebb6d662c]
5.10-upstream-stable	needed
sid	released (6.8.11-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.94-1)
5.10-bullseye-security	needed