NULL Pointer Dereference in Linux Kernel Bluetooth Component

CVE-2024-57988

Summary

A vulnerability exists in the Bluetooth component of the Linux kernel where a NULL pointer dereference could occur if the return value of 'devm_kstrdup()' is not verified. This oversight in the 'btbcm_get_board_name()' function could potentially lead to a kernel crash. This issue has been fixed by implementing a NULL check to ensure that pointer dereferences are safely handled, thus enhancing the stability and security of the Bluetooth functionalities in the Linux kernel.

References