In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix info leak when fetching fw build id
Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.
Metrics
Affected Vendors & Products
References
History
Thu, 18 Sep 2025 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-668 | |
CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:* |
Thu, 07 Nov 2024 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
cvssV3_1
|
ssvc
|

Status: PUBLISHED
Assigner: Linux
Published: 2024-05-30T15:23:47.423Z
Updated: 2025-05-04T09:10:57.176Z
Reserved: 2024-05-17T13:50:33.160Z
Link: CVE-2024-36032

Updated: 2024-08-02T03:30:12.639Z

Status : Analyzed
Published: 2024-05-30T16:15:11.490
Modified: 2025-09-18T14:20:55.040
Link: CVE-2024-36032
