NULL Pointer Dereference in Linux Kernel Bluetooth Component

CVE-2024-57988

What is CVE-2024-57988?

A vulnerability exists in the Bluetooth component of the Linux kernel where a NULL pointer dereference could occur if the return value of 'devm_kstrdup()' is not verified. This oversight in the 'btbcm_get_board_name()' function could potentially lead to a kernel crash. This issue has been fixed by implementing a NULL check to ensure that pointer dereferences are safely handled, thus enhancing the stability and security of the Bluetooth functionalities in the Linux kernel.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References