CVE-2024-50125

Katalog CVE

CVSS 7.8 · High EPSS 0,34%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this checks if the conn->sk is still valid by checking if it part of sco_sk_list.

Rincian

Terbit di NVD

5 November 2024

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1bf4470a3939c678fb822073e9ea77a0560bc6bb patch
• https://git.kernel.org/stable/c/80b05fbfa998480fb3d5299d93eab946f51e9c36 patch
• https://git.kernel.org/stable/c/9ddda5d967e84796e7df1b54a55f36b4b9f21079 patch
• https://git.kernel.org/stable/c/d30803f6a972b5b9e26d1d43b583c7ec151de04b patch
• https://git.kernel.org/stable/c/678386459ffc07d2fbfbfe33456013786975cfef
• https://git.kernel.org/stable/c/74a466a15731a754bcd8b5a83c126b5122e15a45
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html