VYPR
High severity8.8NVD Advisory· Published May 17, 2024· Updated Aug 4, 2026

CVE-2024-35856

CVE-2024-35856

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: Fix double free of skb in coredump

hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb.

Reported-by : Dan Carpenter <[email protected]>

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Linux/Kernel8 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.6,<6.6.30
    • cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.6
  • osv-coords
    Range: >= 6.6.0, < 6.6.30

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.